OAuth Protected Resource Metadata

​

OAuth 2.0 Protected Resource Metadata, per RFC 9728. Advertises the protected resource and the authorization servers that can issue tokens for it. Unauthenticated. Lives at the host root, outside the /v1 prefix.

Responses

  • application/json
Request Example for get/.well-known/oauth-protected-resource
curl https://stage-mcp.paperpile.com/.well-known/oauth-protected-resource

{
  "resource": "https://stage-mcp.paperpile.com",
  "authorization_servers": [
    "https://stage-api.paperpile.com"
  ]
}

Protected resource metadata