---
title: "Protected resource metadata, path-inserted variant"
method: GET
path: "/.well-known/oauth-protected-resource/api/mcp"
tags: ["discovery"]
---

# Protected resource metadata, path-inserted variant

`GET /.well-known/oauth-protected-resource/api/mcp`

## Request

- Base URL: `https://app.presify.io`
- URL: `https://app.presify.io/.well-known/oauth-protected-resource/api/mcp`
- Auth: none declared

Identical to /.well-known/oauth-protected-resource; this is the URL the 401 WWW-Authenticate challenge from /api/mcp points at.

## Response `200`

Protected resource metadata.

- ProtectedResourceMetadata: RFC 9728 document.
  - `resource` string, uri, required
  - `authorization_servers` string[], required
  - `bearer_methods_supported` string[]
  - `scopes_supported` string[]
  - `resource_name` string

---

[API](https://skmtc.dev/presify/apis/presify-public-api.md) · [All operations](https://skmtc.dev/presify/apis/presify-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/presify/apis/presify-public-api/revisions/5e3fe7801ad1?raw)