agent-ready-oauth-protected-resource

Publish RFC 9728 OAuth Protected Resource Metadata for Cloudflare Workers.

47|4|Updated Feb 21, 2026

Search Tags:#authentication #oauth #cloudflare workers #agent discovery #cloudflare access #protected resource metadata #rfc 9728

Ready to run

npx skills add https://github.com/fabricioctelles/skills --skill agent-ready-oauth-protected-resource

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: agent-ready-oauth-protected-resource
Source: https://github.com/fabricioctelles/skills/tree/main/skills/agent-ready-cloudflare/oauth-protected-resource
Command: npx skills add https://github.com/fabricioctelles/skills --skill agent-ready-oauth-protected-resource

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps websites publish standardized OAuth Protected Resource Metadata so AI agents can discover the correct authentication method and authorization server.

Core Features & Use Cases

Metadata Endpoint: Configure a JSON endpoint at the standardized well-known path with the required resource and authorization server fields.
Authentication Discovery: Optionally advertise supported scopes and reference resource metadata from unauthorized responses.
Cloudflare Integration: Implement the endpoint with Cloudflare Workers and Cloudflare Access for agent-ready authentication.
Validation: Scan the deployed website and verify that OAuth Protected Resource Metadata discovery passes.

Quick Start

Use this Skill to implement and validate OAuth Protected Resource Metadata for my Cloudflare-hosted website at the specified resource URL.

Frequently Asked Questions about agent-ready-oauth-protected-resource

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is OAuth Protected Resource Metadata and why do AI agents need it?▼

OAuth Protected Resource Metadata is a standardized JSON endpoint that lets AI agents discover authentication requirements. It advertises the authorization server and supported scopes so agents can automatically access protected resources.

How do I publish RFC 9728 metadata for a Cloudflare Workers site?▼

To publish RFC 9728 metadata, configure a JSON endpoint at the standardized well-known path on your Cloudflare Worker. Include the resource identifier and authorization server array to enable agent discovery.

Can I use Cloudflare Access with OAuth Protected Resource Metadata?▼

Yes, Cloudflare Access integrates with OAuth Protected Resource Metadata. You can implement the well-known endpoint on Cloudflare Workers to expose authorization server configuration and scopes for agent-ready authentication.

How do I validate OAuth Protected Resource Metadata after deployment?▼

You validate OAuth Protected Resource Metadata by scanning the deployed website. The scan verifies that the well-known endpoint serves valid JSON containing the required resource identifier and authorization server fields.

What fields are required for OAuth Protected Resource Metadata?▼

Required OAuth Protected Resource Metadata fields include a resource identifier and an authorization server array. Optional fields include supported scopes and references to resource metadata from unauthorized responses.

Why does my AI agent fail to authenticate against my protected resource?▼

AI agent authentication fails when the protected resource lacks RFC 9728 metadata. Serving valid OAuth Protected Resource Metadata at the well-known endpoint allows agents to discover the authorization server and required scopes.