---
title: "401 WWW-Authenticate probe"
method: GET
path: "/oauth/resource"
tags: ["discovery"]
---

# 401 WWW-Authenticate probe

`GET /oauth/resource`

## Request

- Base URL: `https://skillselion.com`
- URL: `https://skillselion.com/oauth/resource`
- Auth: none declared

Always HTTP 401 with WWW-Authenticate Bearer resource_metadata. Not a token issuer. Public catalog reads do not use this path.

## Response `200`

Not used. This probe always returns 401 with WWW-Authenticate.

- Error
  - `code` string, required: Stable machine code (NOT_FOUND, BAD_REQUEST, UNAUTHORIZED, …).
  - `message` string, required: Human-readable error.
  - `resolution` string, required: What an agent should do next.
  - `statusCode` integer, required: HTTP status repeated in the body.
  - `error` string, required: Alias of message (legacy Nest clients).
  - `details` unknown
  - `path` string
  - `timestamp` string, date-time

## Other responses

- `401`: Missing token. WWW-Authenticate names the protected-resource metadata URL.

---

[API](https://skmtc.dev/skillselion/apis/skillselion-public-api.md) · [All operations](https://skmtc.dev/skillselion/apis/skillselion-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/skillselion/apis/skillselion-public-api/revisions/e6e0c4d3d116?raw)