This is the documentation for v2 — looking for the v1 documentation?
MCP TypeScript SDK

Appearance

MCP TypeScript SDK (V2) / @modelcontextprotocol/server-legacy / auth/handlers/metadata

auth/handlers/metadata ​

Functions ​

metadataHandler() ​

metadataHandler(metadata): RequestHandler

Defined in: packages/server-legacy/src/auth/handlers/metadata.ts:8

Parameters ​

metadata ​

{[key: string]: unknown; authorization_endpoint: string; authorization_response_iss_parameter_supported?: boolean; client_id_metadata_document_supported?: boolean; code_challenge_methods_supported?: string[]; dpop_signing_alg_values_supported?: string[]; grant_types_supported?: string[]; introspection_endpoint?: string; introspection_endpoint_auth_methods_supported?: string[]; introspection_endpoint_auth_signing_alg_values_supported?: string[]; issuer: string; registration_endpoint?: string; response_modes_supported?: string[]; response_types_supported: string[]; revocation_endpoint?: string; revocation_endpoint_auth_methods_supported?: string[]; revocation_endpoint_auth_signing_alg_values_supported?: string[]; scopes_supported?: string[]; service_documentation?: string; token_endpoint: string; token_endpoint_auth_methods_supported?: string[]; token_endpoint_auth_signing_alg_values_supported?: string[]; } | {[key: string]: unknown; authorization_details_types_supported?: string[]; authorization_servers?: string[]; bearer_methods_supported?: string[]; dpop_bound_access_tokens_required?: boolean; dpop_signing_alg_values_supported?: string[]; jwks_uri?: string; resource: string; resource_documentation?: string; resource_name?: string; resource_policy_uri?: string; resource_signing_alg_values_supported?: string[]; resource_tos_uri?: string; scopes_supported?: string[]; tls_client_certificate_bound_access_tokens?: boolean; }

Type Literal ​

{[key: string]: unknown; authorization_endpoint: string; authorization_response_iss_parameter_supported?: boolean; client_id_metadata_document_supported?: boolean; code_challenge_methods_supported?: string[]; dpop_signing_alg_values_supported?: string[]; grant_types_supported?: string[]; introspection_endpoint?: string; introspection_endpoint_auth_methods_supported?: string[]; introspection_endpoint_auth_signing_alg_values_supported?: string[]; issuer: string; registration_endpoint?: string; response_modes_supported?: string[]; response_types_supported: string[]; revocation_endpoint?: string; revocation_endpoint_auth_methods_supported?: string[]; revocation_endpoint_auth_signing_alg_values_supported?: string[]; scopes_supported?: string[]; service_documentation?: string; token_endpoint: string; token_endpoint_auth_methods_supported?: string[]; token_endpoint_auth_signing_alg_values_supported?: string[]; }

authorization_endpoint ​

string = SafeUrlSchema

authorization_response_iss_parameter_supported? ​

boolean = ...

client_id_metadata_document_supported? ​

boolean = ...

code_challenge_methods_supported? ​

string[] = ...

dpop_signing_alg_values_supported? ​

string[] = ...

RFC 9449 §5.1 (DPoP, SEP-1932): the JWS alg values this authorization server accepts for DPoP proofs at the token endpoint. A server supporting DPoP MUST publish this field.

grant_types_supported? ​

string[] = ...

introspection_endpoint? ​

string = ...

introspection_endpoint_auth_methods_supported? ​

string[] = ...

introspection_endpoint_auth_signing_alg_values_supported? ​

string[] = ...

issuer ​

string = ...

registration_endpoint? ​

string = ...

response_modes_supported? ​

string[] = ...

response_types_supported ​

string[] = ...

revocation_endpoint? ​

string = ...

revocation_endpoint_auth_methods_supported? ​

string[] = ...

revocation_endpoint_auth_signing_alg_values_supported? ​

string[] = ...

scopes_supported? ​

string[] = ...

service_documentation? ​

string = ...

token_endpoint ​

string = SafeUrlSchema

token_endpoint_auth_methods_supported? ​

string[] = ...

token_endpoint_auth_signing_alg_values_supported? ​

string[] = ...

Returns ​

RequestHandler