# `GET /.well-known/oauth-protected-resource`

Public. No cookie required.

OAuth 2.0 Protected Resource Metadata (RFC 9728)

Returns protected resource metadata discovering the authorization server for the MCP endpoint.

## Response `200`

Protected Resource Metadata

---

_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._