OAuth 2.1

Protected resource metadata

RFC 9728 document: the MCP resource, its authorization server and scopes. Clients arrive here from resource_metadata in a 401.

GET/.well-known/oauth-protected-resource/mcp

Authorization

No authentication required.

Request

curl https://ornek.solk.app/.well-known/oauth-protected-resource/mcp

const res = await fetch("https://ornek.solk.app/.well-known/oauth-protected-resource/mcp");
const data = await res.json();

import requests

r = requests.get("https://ornek.solk.app/.well-known/oauth-protected-resource/mcp")
print(r.json())

Response

{
  "authorization_servers": [
    "https://ornek.solk.app"
  ],
  "bearer_methods_supported": [
    "header"
  ],
  "resource": "https://ornek.solk.app/mcp",
  "resource_documentation": "https://docs.solk.app/mcp/overview",
  "resource_name": "Solk CRM (Örnek Kimya)",
  "scopes_supported": [
    "crm.read",
    "crm.write"
  ]
}