/.well-known/oauth-protected-resource
type: TechArticle
description: A JSON metadata document that tells clients which authorisation server issues the tokens an OAuth-protected API accepts, and how to present them. Only needed if you expose an OAuth-protected resource.
language: en
is part of: Web Specification Studio
author: Web Specification Studio
publisher: Web Specification Studio
license: https://creativecommons.org/licenses/by/4.0/
date modified: 2026-07-08T00:00:00.000Z
citation: RFC 9728 — OAuth 2.0 Protected Resource Metadata
  type: CreativeWork
  publisher: IETF
citation: RFC 8414 — OAuth 2.0 Authorization Server Metadata
  type: CreativeWork
  publisher: IETF
citation: IANA — Well-Known URIs Registry
  type: CreativeWork
  publisher: IANA
citation: Model Context Protocol — Authorization
  type: CreativeWork
  publisher: Anthropic / MCP

Web Specification Studio
type: WebSite

Web Specification Studio
type: Organization

breadcrumb
type: BreadcrumbList
item list element: Home
  type: ListItem
  position: 1
  item: https://webspecification.com/
item list element: Spec
  type: ListItem
  position: 2
  item: https://webspecification.com/spec/
item list element: Well-Known URIs
  type: ListItem
  position: 3
  item: https://webspecification.com/spec/well-known/
item list element: /.well-known/oauth-protected-resource
  type: ListItem
  position: 4
  item: https://webspecification.com/spec/well-known/oauth-protected-resource/