xaa.rocks Home IdPs Resources New flow
Account
sid: S7dGyVfw…
Save your recovery URL

Your sandbox is only tied to this browser's cookie. If you clear cookies or switch browsers you'll lose access to your saved configs. Save your recovery URL to restore it later.

Discover MCP server

Back to list

Following the MCP authorization spec (2026-07-28), this will:

  1. Send an unauthenticated initialize request and read the WWW-Authenticate challenge from the 401
  2. Fetch the Protected Resource Metadata (RFC 9728) to find the resource identifier and its authorization servers
  3. Fetch the Authorization Server Metadata (RFC 8414 / OpenID Connect Discovery) to find the issuer and token_endpoint

Nothing is saved yet — you'll get the filled-in resource form to review first.

Client identity

The discovered resource will use this app's Client ID Metadata Document as its client_id, which is the registration mechanism this spec revision prefers:

https://client.xaa.rocks/client-metadata

You can replace it with a pre-registered client ID on the next screen.