Oauth Protected Resource

RFC 9728 protected-resource metadata: tells an MCP client which OAuth authorization server issues tokens for this resource. A 401 from /mcp points here via WWW-Authenticate; the client fetches this, finds the auth server, runs OAuth, and retries with a Bearer token. Returns 404 when OAuth is disabled so we don't advertise a flow that isn't live.

get/.well-known/oauth-protected-resource/mcp

Request

  • Base URL: https://mcp.physea.ai (the document declares no server; this is the origin it was published from)
  • URL: https://mcp.physea.ai/.well-known/oauth-protected-resource/mcp
  • Auth: none declared

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.