MCP server · Discovery
Protected Resource Metadata served
The MCP server publishes an OAuth 2.0 Protected Resource Metadata document (RFC 9728) that tells clients which authorization servers protect it.
mcp.prm
In revision 2026-07-28
- Level
- MUST
- Defined in
- Authorization Server Discovery › Authorization Server LocationMCP Authorization 2026-07-28
- Party
- MCP server
- Observable
passiveObservable by reading published metadata, without any request to the server.
Level by revision
| Revision | Level | Section |
|---|---|---|
| 2026-07-28current | MUST | Authorization Server Discovery › Authorization Server Location |
| 2025-11-25 | MUST | Authorization Server Discovery › Authorization Server Location |
Adoption across listed servers
- Supported5
- Partial0
- Unsupported0
- Unknown29
- Not applicable5