Skip to main content
GET
cURL

Response

The protected resource metadata.

OAuth protected resource metadata, as RFC 9728 defines it.

resource
string<uri>
required

The MCP server's URL.

authorization_servers
string<uri>[]
required

The issuers whose tokens the server accepts: https://app.reflections.ai.

scopes_supported
enum<string>[]
required

The scopes the MCP server's tools need.

A scope a person can approve. Connections use all ten. The MCP server accepts talent:read, licenses:read, checks:write, generations:write, license_requests:write and usage:write.

Available options:
talent:read,
licenses:read,
license_requests:write,
files:write,
checks:write,
generations:write,
sessions:write,
revocations:write,
usage:write,
statements:read
bearer_methods_supported
string[]
required

Always ["header"]: send the token in the Authorization header.

resource_name
string

The name MCP clients show.

resource_documentation
string<uri>

The MCP server's documentation.