IETF OAuth · Discovery

OAuth 2.0 Protected Resource Metadata

A well-known JSON document in which a protected resource names the authorization servers it trusts and the scopes it understands, so a client can start from the resource alone.

PublishedProposed StandardCanonical documentrfc9728

Revisions

  1. rfccurrent

Relations 4

OAuth 2.0 Protected Resource Metadata builds on 1

OAuth 2.0 Protected Resource Metadata references 1

OAuth 2.0 Protected Resource Metadata is built on by 2

  • MCP AuthorizationpublishedAn MCP server announces its authorization servers through protected resource metadata.Source
  • auth.mdpublishedPlaces the agent_auth block in the protected resource and authorization server metadata.Source

Defines in the shared model

No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.