Fix server devx

Author: localden

samples/ProtectedMCPServer/Program.cs

@@ -15,7 +15,7 @@
 })
 .AddScheme<AuthenticationSchemeOptions, SimpleAuthHandler>("Bearer", options => { })
 .AddMcp(options => {
-    // Configure MCP authentication options with the resource metadata URI
+    // Ensure ResourceMetadataUri matches the actual mapping in McpEndpointRouteBuilderExtensions.cs
     options.ResourceMetadataUri = new Uri("/.well-known/oauth-protected-resource", UriKind.Relative);
 
     // Configure the resource metadata using our enhanced options
@@ -38,9 +38,6 @@
 // Don't forget to register the ResourceMetadataService
 builder.Services.AddSingleton<ResourceMetadataService>();
 
-// IMPORTANT: Register the McpAuthorizationMarker to enable authorization on MCP endpoints
-builder.Services.AddSingleton<McpAuthorizationMarker>();
-
 // Configure MCP Server
 builder.Services.AddMcpServer(options =>
 {
@@ -107,6 +104,8 @@
 app.UseAuthorization();
 
 // Map MCP endpoints with authorization
+// Note: The SDK will automatically map /.well-known/oauth-protected-resource 
+// and make it accessible without authorization
 app.MapMcp();
 
 Console.WriteLine("Starting MCP server with authorization at http://localhost:7071");

src/ModelContextProtocol.AspNetCore/Auth/McpAuthorizationExtensions.cs

@@ -41,6 +41,10 @@ public static AuthenticationBuilder AddMcp(
         Action<McpAuthenticationOptions>? configureOptions = null)
     {
         builder.Services.TryAddSingleton<ResourceMetadataService>();
+        
+        // Register the marker to indicate that MCP authorization is configured
+        // This will be used by MapMcp to apply authorization to endpoints
+        builder.Services.TryAddSingleton<McpAuthorizationMarker>();
 
         return builder.AddScheme<McpAuthenticationOptions, McpAuthenticationHandler>(
             authenticationScheme, 

src/ModelContextProtocol.AspNetCore/Auth/McpAuthorizationMarker.cs

@@ -3,4 +3,4 @@ namespace ModelContextProtocol.AspNetCore.Auth;
 /// <summary>
 /// Marker class to indicate that MCP authorization has been configured.
 /// </summary>
-internal class McpAuthorizationMarker { }
+public class McpAuthorizationMarker { }