Oauth protected resource

Skill whiteknightonhorse/aipush-agent-skills/skills/oauth-protected-resource

Free, open, security-verified agent skills for AEO (Answer Engine Optimization) — make any site ready for AI agents. Live: aipush.app

Install

npx -y skills add whiteknightonhorse/aipush-agent-skills --skill oauth-protected-resource

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.1 KB, 270 tokens by cl100k_base, as published. Nobody here has run it

Publish OAuth Protected Resource Metadata

AIPUSH agent skill · Category: Identity & Auth · Slug: oauth-protected-resource

RFC 9728 metadata tells agents which authorization servers can issue tokens for your resource and which scopes exist — so they can obtain the right access token.

Why it matters

RFC 9728 metadata tells agents which authorization servers can issue tokens for your resource and which scopes exist — so they can obtain the right access token.

How to detect

Request https://YOURDOMAIN/.well-known/oauth-protected-resource (HTTP 200, valid JSON).

How to implement

Serve /.well-known/oauth-protected-resource:

{
  "resource": "https://YOURDOMAIN",
  "authorization_servers": ["https://YOURDOMAIN"],
  "scopes_supported": ["read", "write"],
  "bearer_methods_supported": ["header"]
}

How to verify

curl -s https://YOURDOMAIN/.well-known/oauth-protected-resource | jq .authorization_servers lists your AS.

References

https://www.rfc-editor.org/rfc/rfc9728

Part of the AIPUSH agent skills catalog. Scan your site free at https://aipush.app.