Protected Resource Metadata
Protected Resource Metadata: The RFC 9728 document an MCP server MUST publish to name its authorization servers and scopes. Example: mcp-handler serves it from /.well-known/oauth-protected-resource. Next in the glossary is Remote MCP server: An MCP server reached over the network, today through Streamable HTTP, rather than launched locally.
Definition
The RFC 9728 document an MCP server MUST publish to name its authorization servers and scopes.
Example, with source
mcp-handler serves it from /.well-known/oauth-protected-resource. (vercel.com, read 4 November 2026)
Where it appears on this site
Neighbouring terms
- Prompt: A templated message or workflow an MCP server offers to users.
- Remote MCP server: An MCP server reached over the network, today through Streamable HTTP, rather than launched locally.
- Resource: Context or data an MCP server offers for the user or model to read, addressed by URI.