OAuth · Discovery: protected resource
OAuth · Discovery: protected resource
RFC 9728 protected resource metadata: points MCP clients at the authorization server that guards the /mcp endpoint. Unauthenticated, host root, no /api prefix.
Authentication
AuthorizationBearer
Bearer authentication of the form Bearer <token>, where token is your auth token.
Response
Successful response

