OAuth 2.0 Protected Resource Metadata (RFC 9728)
MCP
OAuth 2.0 Protected Resource Metadata (RFC 9728)
Discovery document Claude (and other MCP clients) fetch after
receiving a 401 from /mcp with a WWW-Authenticate header
pointing here. Tells the client which authorization server to
use and what scopes are available.
GET
OAuth 2.0 Protected Resource Metadata (RFC 9728)
Response
200 - application/json
Metadata document.