OAuth protected resource metadata

Returns protected resource metadata per RFC 9728, including supported scopes and the authorization server.

GET /.well-known/oauth-protected-resource

OAuth protected resource metadata

cURL

curl --request GET \
  --url https://mcp.calendly.com/.well-known/oauth-protected-resource \
  --header 'Authorization: Bearer <token>'

200

{
  "resource": "<string>",
  "authorization_servers": [
    "<string>"
  ],
  "scopes_supported": [
    "<string>"
  ],
  "bearer_methods_supported": [
    "<string>"
  ]
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Response

200 - application/json

OK

resource · string<uri>

authorization_servers · string<uri>[]

scopes_supported · string[]

bearer_methods_supported · string[]