Mathias Bergqvist 9cbb564cd9 fix: add OAuth discovery endpoints for claude.ai handshake ...

Implements RFC 9728 protected resource metadata and HEAD probe so
claude.ai can complete its pre-handshake discovery without hitting 404.

- GET /.well-known/oauth-protected-resource → 200 {"authorization_servers":[]}
- GET /.well-known/oauth-authorization-server → 404 (no auth server)
- HEAD /mcp → 200 + MCP-Protocol-Version: 2025-06-18 header

Closes #2

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-06 17:19:14 +02:00

4.6 KiB

Raw Blame History

View Raw