OAuth Discovery
RFC 8414 / RFC 9728 metadata documents. An MCP or OAuth client reads these to learn where to authorize, exchange tokens and register — no configuration needed beyond the MCP endpoint URL.
Authorization Server Metadata
RFC 8414 authorization-server metadata — where to authorize, exchange tokens, revoke and
Protected Resource Metadata
RFC 9728 protected-resource metadata. An MCP client reaches this document from the