MCP TypeScript SDK (V2)
    Preparing search index...

    Discovery state that can be persisted across sessions by an OAuthClientProvider.

    Contains the results of RFC 9728 protected resource metadata discovery and authorization server metadata discovery. Persisting this state avoids redundant discovery HTTP requests on subsequent auth calls.

    interface OAuthDiscoveryState {
        authorizationServerMetadata?: AuthorizationServerMetadata;
        authorizationServerUrl: string;
        resourceMetadata?: {
            authorization_details_types_supported?: string[];
            authorization_servers?: string[];
            bearer_methods_supported?: string[];
            dpop_bound_access_tokens_required?: boolean;
            dpop_signing_alg_values_supported?: string[];
            jwks_uri?: string;
            resource: string;
            resource_documentation?: string;
            resource_name?: string;
            resource_policy_uri?: string;
            resource_signing_alg_values_supported?: string[];
            resource_tos_uri?: string;
            scopes_supported?: string[];
            tls_client_certificate_bound_access_tokens?: boolean;
            [key: string]: unknown;
        };
        resourceMetadataUrl?: string;
    }

    Hierarchy (View Summary)

    Index

    Properties

    authorizationServerMetadata?: AuthorizationServerMetadata

    The authorization server metadata (endpoints, capabilities), or undefined if metadata discovery failed.

    authorizationServerUrl: string

    The authorization server URL, either discovered via RFC 9728 or derived from the MCP server URL as a fallback.

    resourceMetadata?: {
        authorization_details_types_supported?: string[];
        authorization_servers?: string[];
        bearer_methods_supported?: string[];
        dpop_bound_access_tokens_required?: boolean;
        dpop_signing_alg_values_supported?: string[];
        jwks_uri?: string;
        resource: string;
        resource_documentation?: string;
        resource_name?: string;
        resource_policy_uri?: string;
        resource_signing_alg_values_supported?: string[];
        resource_tos_uri?: string;
        scopes_supported?: string[];
        tls_client_certificate_bound_access_tokens?: boolean;
        [key: string]: unknown;
    }

    The OAuth 2.0 Protected Resource Metadata from RFC 9728, or undefined if the server does not support it.

    resourceMetadataUrl?: string

    The URL at which the protected resource metadata was found, if available.