> ## Documentation Index
> Fetch the complete documentation index at: https://docs.panderra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Oauth Protected Resource

> Protected Resource Metadata (RFC 9728).

Points clients at the authorization server for this resource
(the MCP endpoint). Same issuer as the auth-server metadata —
the resource and the auth server live on the same host per
tenant in our deployment.



## OpenAPI

````yaml /api-reference/openapi.json get /.well-known/oauth-protected-resource
openapi: 3.1.0
info:
  title: Big Panda — Public API
  description: >-
    Externe REST-API für Connector-Plugins (JTL, Shopware), n8n-Integrationen
    und Custom-Clients. Tenant-Routing über Subdomain, Auth über Bearer-Token.
  version: 0.1.0
servers:
  - url: https://{tenant}.app.big-panda.ai
    description: Big Panda — Tenant-Subdomain. Ersetze {tenant} durch deinen Tenant-Slug.
    variables:
      tenant:
        default: demo
        description: Dein Big-Panda-Tenant-Slug (z.B. 'acme').
security:
  - BearerAuth: []
tags:
  - name: Products
  - name: Knowledge Entries
  - name: Categories
  - name: Sites
  - name: Search
  - name: OAuth
    description: >-
      OAuth-2.1-Authentifizierung — Discovery, Dynamic Client Registration,
      Authorize, Token, Revoke.
paths:
  /.well-known/oauth-protected-resource:
    get:
      tags:
        - OAuth
      summary: Oauth Protected Resource
      description: |-
        Protected Resource Metadata (RFC 9728).

        Points clients at the authorization server for this resource
        (the MCP endpoint). Same issuer as the auth-server metadata —
        the resource and the auth server live on the same host per
        tenant in our deployment.
      operationId: oauth_protected_resource__well_known_oauth_protected_resource_get
      parameters: []
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: >-
                  Response Oauth Protected Resource  Well Known Oauth Protected
                  Resource Get
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: >-
        API-Token aus dem Big-Panda-Admin-UI unter Einstellungen → API-Keys.
        Header: `Authorization: Bearer <token>`.

````