Skip to content
1 minute readFixedAgent-ready

OAuth discovery describes supported token scopes

OAuth metadata lists token scopes, the restricted scopes of self-registered clients and the canonical issuer.

Read the issuer's discovery document before requesting a token.

  • scopes_supported describes scopes that tokens can carry. Key-only administrative scopes are not offered through token grants.
  • self_registration_scopes describes the access available to a self-registered client.
  • The canonical metadata is published at https://api.last-price.ai/.well-known/oauth-authorization-server.
  • Protected-resource metadata identifies the MCP resource and its authorization server.

A requested scope is not a grant; the client's permissions and workspace status still apply.