Expand description
The two metadata documents a client reads before it can authorize.
Only the members MCP’s flow acts on are read; everything else in either document is ignored rather than rejected, because both are extensible.
- Protected resource metadata (RFC 9728):
resource,authorization_servers,scopes_supported. - Authorization server metadata (RFC 8414 /
OpenIDConnect Discovery): the endpoints, the advertised capabilities the flow branches on, andissuer, which “MUST be identical to the issuer identifier used to construct the well-known URL”. https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/authorization-server-discovery
Structs§
- Authorization
Server - What a client reads from authorization server metadata.
- Protected
Resource - What a client reads from protected resource metadata.
Enums§
- Metadata
Error - Why a metadata document could not be used.