OAuth protected resource metadata
GET
/api/v1/oauth/resource
const url = 'http://localhost:3000/api/v1/oauth/resource';const options = {method: 'GET'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url http://localhost:3000/api/v1/oauth/resourceRFC 9728, for /api/v1/mcp. Also at /.well-known/oauth-protected-resource; a 401 names it in WWW-Authenticate.
No key needed.
Responses
Section titled “Responses”Metadata
default
Section titled “default”An error
Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
detail
Examplegenerated
{ "error": { "code": "example", "message": "example", "detail": "example" }}