Skip to content

Commit 39036ab

Browse files
committed
docs: update authentication server metadata documentation to clarify client terminology and provide metadata endpoint example
1 parent 213f25e commit 39036ab

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

exercises/01.discovery/02.problem.as/README.mdx

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
# Auth Server Metadata
22

3-
👨‍💼 Now that users can connect to our MCP server from any domain, they need to be able to discover how to authenticate with our system. When users want to access protected resources or perform actions that require authentication, they need to know where to go and what methods are available.
3+
👨‍💼 Now that clients can connect to our MCP server from any domain, they need to be able to discover how to authenticate with our system. When clients want to access protected resources or perform actions that require authentication, they need to know where to go and what methods are available.
44

5-
The problem is: how do we provide users with the information they need to authenticate with our OAuth server? Without this metadata, users' clients will be stuck because they can't figure out authentication endpoints and supported features.
5+
The problem is: how do we provide clients with the information they need to authenticate with our OAuth server? Without this metadata, clients will be stuck because they can't figure out authentication endpoints and supported features.
66

77
```ts
88
// Example: A user trying to discover our OAuth server capabilities
@@ -17,7 +17,12 @@ const metadata = await response.json()
1717
// plus more things necessary for the client to set up the connection for the user
1818
```
1919

20-
This metadata endpoint is the gateway that tells users everything they need to know about our authentication system.
20+
<callout-info class="aside">
21+
You can see what our Authorization Server metadata looks like by visiting
22+
[`http://localhost:7788/.well-known/oauth-authorization-server`](http://localhost:7788/.well-known/oauth-authorization-server).
23+
</callout-info>
24+
25+
This metadata endpoint is the gateway that tells clients everything they need to know about our authentication system.
2126

2227
To do this, we need to implement the `/.well-known/oauth-authorization-server` endpoint that returns the OAuth server's metadata. This endpoint will fetch the metadata from our actual OAuth server and relay it to users, making our MCP server a complete authentication discovery hub.
2328

0 commit comments

Comments
 (0)