Stats
Actions
Tags
Help us improve
Share bugs, ideas, or general feedback.
From prodsec-skills
Enforces OAuth 2.0 Protected Resource Metadata (RFC 9728) in MCP servers. Use when building, configuring, or reviewing MCP server authentication and authorization discovery.
npx claudepluginhub redhatproductsecurity/prodsec-skills --plugin prodsec-skillsHow this skill is triggered — by the user, by Claude, or both
Slash command
/prodsec-skills:protected-resource-metadataThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
MCP servers MUST implement OAuth 2.0 Protected Resource Metadata (RFC 9728). MCP clients MUST use this metadata to discover the authorized authorization servers for a given MCP server.
Enforces OAuth 2.0 Protected Resource Metadata (RFC 9728) in MCP clients for authorization server discovery. Use when building or reviewing MCP client authentication flows.
Implements MCP server authentication using OAuth dynamic client registration (RFC 7591/8414), PKCE, bearer tokens, and API keys for admin UIs. Supports per-agent credentials, metadata discovery, token exchange, and tool sync for providers like Linear, Sentry.
Implements auth scopes on tools/resources and configures auth modes (none/jwt/oauth) for `@cyanheads/mcp-ts-core`. Use when adding declarative or dynamic authorization to MCP handlers.
Share bugs, ideas, or general feedback.
MCP servers MUST implement OAuth 2.0 Protected Resource Metadata (RFC 9728). MCP clients MUST use this metadata to discover the authorized authorization servers for a given MCP server.
Protected Resource Metadata allows MCP clients to discover:
scopes_supported)/.well-known/oauth-protected-resource endpointresource identifier matching the MCP server's URLauthorization_serversscopes_supported for available permissions{
"resource": "https://mcp-server.example.com",
"authorization_servers": [
"https://auth.example.com"
],
"scopes_supported": [
"tools:read",
"tools:execute",
"resources:read"
],
"bearer_methods_supported": ["header"],
"resource_documentation": "https://docs.example.com/mcp-api"
}