-
Origins allowed to call the MCP endpoint (DNS-rebinding protection, per the Streamable
HTTP transport spec).
Authorization server issuer URL, published in the RFC 9728 Protected Resource
Metadata document at /.well-known/oauth-protected-resource{rootPath}.
Free-text instructions surfaced to the client at initialize time.
Canonical URI of this MCP endpoint, used for RFC 8707 audience binding: tokens whose
aud claim does not include this value are rejected.
HTTP path for the Streamable HTTP endpoint.
OAuth2 scopes this server expects clients to request, published as
scopes_supported in the RFC 9728 Protected Resource Metadata document.
OAuth2 requirement policy.
Server version reported in initialize's serverInfo.