GET /.well-known/oauth-protected-resource
The grid's OAuth protected-resource metadata, which MCP clients read to find where to sign in.
Syntax
GET https://grid-lab.zyxio.xyz/.well-known/oauth-protected-resource
GET https://grid-lab.zyxio.xyz/.well-known/oauth-protected-resource/mcpRequest
No credential, parameters or body. The first describes the whole API; the second, /mcp alone.
Response
200 OK
| Field | Meaning |
|---|---|
resource | https://grid-lab.zyxio.xyz, or https://grid-lab.zyxio.xyz/mcp for the second document. A sign-in token for the grid names this as its audience. |
authorization_servers | ["https://login.grid.zyxio.xyz"]: Zyxio sign-in, where tokens come from. |
scopes_supported | openid, offline_access, email, profile and grid.invoke. |
bearer_methods_supported | ["header"]: send the token as Authorization: Bearer. |
You need this only when you write your own sign-in flow; MCP clients read it by themselves after a 401 from POST /mcp.
Errors
None of its own.
Example
curl -s https://grid-lab.zyxio.xyz/.well-known/oauth-protected-resource/mcp{
"resource": "https://grid-lab.zyxio.xyz/mcp",
"authorization_servers": ["https://login.grid.zyxio.xyz"],
"scopes_supported": ["openid", "offline_access", "email", "profile", "grid.invoke"],
"bearer_methods_supported": ["header"]
}Billing
Free.