protected-resource-metadata

Official

Secure MCP servers with OAuth 2.0 metadata discovery.

AuthorRedHatProductSecurity
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill ensures MCP servers can securely advertise OAuth 2.0 Protected Resource Metadata, enabling clients to reliably discover authorization services and scopes.

Core Features & Use Cases

  • Implementation Guidance: Assists developers during server setup to implement OAuth 2.0 standardized metadata endpoints.
  • Security Assurance: Ensures metadata is served over HTTPS and remains up to date, enhancing trust.
  • Use Case: Building or auditing an MCP server to align with OAuth 9728 by configuring proper metadata endpoints and listing trusted authorization servers.

Quick Start

Use this Skill to verify that an MCP server correctly exposes its OAuth protected resource metadata according to RFC 9728.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: protected-resource-metadata
Download link: https://github.com/RedHatProductSecurity/prodsec-skills/archive/main.zip#protected-resource-metadata

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.