MCP

Protected resource metadata

RFC 9728 metadata for the MCP endpoint. Served unauthenticated and free of secrets, because a client fetches it before it holds any credential.

authorization_servers names this deployment's own OAuth 2.1 server (see /.well-known/oauth-authorization-server), which is what makes a Connect button work for a listing in Claude's connector directory or as a ChatGPT app. Existing key-authenticated connectors keep working untouched alongside it.

get/.well-known/oauth-protected-resource

Request

  • Base URL: https://scanduro.com
  • URL: https://scanduro.com/.well-known/oauth-protected-resource
  • Auth: HTTP bearer

Response

Where this resource lives and what scopes it understands.

resourcestring uri required
resource_namestring
resource_documentationstring uri
bearer_methods_supportedstring[]
scopes_supportedApiScope[] required

Changes

No recorded changes to this operation across all 1 revision of this API.