OptionalauthorizationOAuth authorization endpoint
OptionalauthorizationWhether the authorization response carries an iss parameter (RFC 9207)
OptionalintrospectionToken introspection endpoint
OptionalissuerIssuer identifier from the authorization server metadata (RFC 8414)
OptionalregistrationDCR client registration endpoint
OptionalresourceThe protected resource's canonical identifier, from the RFC 9728 metadata
document's resource field. This is what an RFC 8707 resource indicator
must carry, and it is the resource server's own statement of its identity -
not the URL we happened to dial, and never the base URL discovery was
performed against, which has any /mcp segment stripped off it.
Absent when no protected-resource metadata was published and the authorization server was reached by direct RFC 8414 discovery instead.
OptionalscopesSupported OAuth scopes
Whether the server supports Dynamic Client Registration (RFC 7591)
OptionaltokenOAuth token endpoint
OAuth server capabilities discovered from .well-known endpoint