Module: Mcp

Defined in:

app/controllers/mcp/landing_controller.rb,
app/controllers/mcp/sessions_controller.rb,
app/controllers/mcp/oauth_metadata_controller.rb

Overview

OAuth 2.0 metadata endpoints for the MCP Gateway.

Two endpoints are served:

1. Authorization Server Metadata (RFC 8414)
   /.well-known/oauth-authorization-server
   Returns endpoints, grant types, PKCE support, etc.

2. Protected Resource Metadata (RFC 9728)
   /.well-known/oauth-protected-resource
   Tells clients this is a protected resource and where to find the auth server.
   Claude Desktop fetches this first to discover the authorization server.

See: https://modelcontextprotocol.io/specification/2025-03-26/basic/authorization
See: https://datatracker.ietf.org/doc/html/rfc8414
See: https://datatracker.ietf.org/doc/html/rfc9728

Defined Under Namespace

Classes: LandingController, OauthMetadataController, SessionsController