---
name: oauth-protected-resource
description: Publish OAuth protected resource metadata
---

# Fix: oauthProtectedResource

**Probe:** `GET /.well-known/oauth-protected-resource` — pass if `resource` (string) and non-empty `authorization_servers` array.

```json
{
    "resource": "https://example.com/api",
    "authorization_servers": ["https://example.com"]
}
```

Spec: https://www.rfc-editor.org/rfc/rfc9728.html