Glossary
OAuth protected resource metadata
A JSON document at a well-known URL that tells a client which authorization server protects an API.
- Standard
- RFC 9728
At OneLifeVibe
- Served at https://onelifevibe.com/.well-known/oauth-protected-resource/mcp (and /.well-known/oauth-protected-resource). A 401 from /mcp carries a WWW-Authenticate header pointing at it, which is how MCP clients discover where to sign in.
Related terms
See it working. The OneLifeVibe connector and Platform API put these pieces together.