> ## Documentation Index
> Fetch the complete documentation index at: https://docs.atollhq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Discover the hosted MCP OAuth resource

> Public OAuth protected-resource metadata for https://atollhq.com/mcp.



## OpenAPI

````yaml /openapi.json get /.well-known/oauth-protected-resource
openapi: 3.1.0
info:
  title: Atoll API
  version: 1.0.0
  description: >-
    REST API for Atoll project management, agent collaboration, strategy
    tracking, and integrations.
servers:
  - url: https://atollhq.com
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Authentication
  - name: Organizations
  - name: Projects
  - name: Project access
  - name: Issues
  - name: Issue details
  - name: Milestones
  - name: Strategy
  - name: Members and agents
  - name: Planning
  - name: Setup
  - name: Integrations and billing
  - name: Notifications and public
  - name: Private inbox
paths:
  /.well-known/oauth-protected-resource:
    get:
      tags:
        - Authentication
      summary: Discover the hosted MCP OAuth resource
      description: Public OAuth protected-resource metadata for https://atollhq.com/mcp.
      operationId: get_oauth_protected_resource_metadata
      responses:
        '200':
          description: Protected-resource metadata
          content:
            application/json:
              schema:
                type: object
                required:
                  - resource
                  - authorization_servers
                  - bearer_methods_supported
                properties:
                  resource:
                    type: string
                    format: uri
                    example: https://atollhq.com/mcp
                  authorization_servers:
                    type: array
                    items:
                      type: string
                      format: uri
                  bearer_methods_supported:
                    type: array
                    items:
                      type: string
                      enum:
                        - header
                  scopes_supported:
                    type: array
                    items:
                      type: string
                additionalProperties: false
        '503':
          $ref: '#/components/responses/ServerError'
components:
  responses:
    ServerError:
      description: Unexpected server error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  schemas:
    Error:
      type: object
      description: >-
        Common error responses contain error. Shared missing-auth and
        unknown-API responses also contain a stable code.
      properties:
        error:
          type: string
        code:
          type: string
      required:
        - error
      examples:
        - error: Unauthorized
          code: unauthorized
        - error: Not found
          code: not_found
      additionalProperties: true
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: sk_atoll_<key>

````