# Protected resource metadata

`GET /.well-known/oauth-protected-resource/mcp`

RFC 9728 document: the MCP resource, its authorization server and scopes. Clients arrive here from `resource_metadata` in a `401`.

## Response

```json 200
{
  "authorization_servers": [
    "https://ornek.solk.app"
  ],
  "bearer_methods_supported": [
    "header"
  ],
  "resource": "https://ornek.solk.app/mcp",
  "resource_documentation": "https://docs.solk.app/mcp/overview",
  "resource_name": "Solk CRM (Örnek Kimya)",
  "scopes_supported": [
    "crm.read",
    "crm.write"
  ]
}
```