Return RFC 9728 metadata for the protected MCP resource.

GET

/.well-known/oauth-protected-resource/mcp

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/.well-known/oauth-protected-resource/mcp

Responses

200

RFC 9728 protected resource metadata.

Media type application/json

object

resource

required

string format: uri

resource_name

required

Human-readable product and deployment name intended for client display.

string

authorization_servers

required

Array<string>

>= 1 items

scopes_supported

required

Array<string>

Allowed values: agent:read agent:user-data:read agent:write

bearer_methods_supported

required

Array<string>

Allowed values: header

dpop_signing_alg_values_supported

required

Array<string>

resource_documentation

string format: uri

key

additional properties

Example

{
  "resource_name": "Authrim (test)",
  "scopes_supported": [
    "agent:read"
  ],
  "bearer_methods_supported": [
    "header"
  ]
}

404

Agent access is disabled for the tenant.

Media type application/json

object

error

required

string

error_description

string

message

string

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example"
}

503

Agent access configuration could not be evaluated safely.

Media type application/json

object

error

required

string

error_description

string

message

string

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example"
}