OAuth

Protected Resource Metadata (MCP)

The same document at the path-suffixed location (RFC 9728 §3.1) that a 401 from `/api/v1/mcp` names in `WWW-Authenticate: Bearer resource_metadata=...`.

API key access

This route has its own authentication (or none); an API key is not used here.
GET/.well-known/oauth-protected-resource/api/v1/mcp

Response Body

curl -X GET "http://localhost:8000/.well-known/oauth-protected-resource/api/v1/mcp"
{
  "resource": "string",
  "authorization_servers": [
    "string"
  ],
  "scopes_supported": [
    "string"
  ],
  "bearer_methods_supported": [
    "string"
  ],
  "resource_name": "string"
}
Empty