All checks › API, Auth, MCP & Skills
OAuth Protected Resource
Why it matters
It complements OAuth discovery by stating specifically which authorization server protects which resource and which scopes are accepted. Without this metadata an agent knows authentication exists but not exactly which permission to ask for — this piece closes the full flow of an agent obtaining authorization to act on the user's behalf.
Want to see how your site does?
The free scan runs this and every other check in about 30 seconds and shows the evidence for each one.
Scan my site for free