OAuth

OAuth protected resource metadata

RFC 9728 document named by WWW-Authenticate resource_metadata. resource is {origin}/mcp with no trailing slash. authorization_servers is that origin. bearer_methods_supported is header only. scopes_supported is the issuable catalog (links:disable and analytics:read are omitted). Same JSON as the path-insert and /mcp aliases.

get/.well-known/oauth-protected-resource

Request

  • Base URL: https://xn--s7y.xn--3ds443g
  • URL: https://xn--s7y.xn--3ds443g/.well-known/oauth-protected-resource
  • Auth: none required

Response

Protected resource metadata

resourcestring required

{origin}/mcp with no trailing slash

authorization_serversstring[] required
scopes_supportedstring[] required
bearer_methods_supportedstring[] required

Changes

No recorded changes to this operation across all 1 revision of this API.