> ## Documentation Index
> Fetch the complete documentation index at: https://api-docs.voicecheap.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Get MCP protected-resource metadata

> Discover the MCP resource audience, authorization server, supported product permissions, and supported bearer-token transport.

Discover the MCP resource audience, authorization server, supported product permissions, and supported bearer-token transport.

```http theme={null}
GET https://api.voicecheap.ai/.well-known/oauth-protected-resource/mcp
```

## Authentication

None.

## Request examples

Follow the documented encoding and authentication for this route. The action API's envelope and idempotency rules apply only to action invocations.

<RequestExample>
  ```bash cURL theme={null}
  curl --request GET 'https://api.voicecheap.ai/.well-known/oauth-protected-resource/mcp'
  ```

  ```javascript JavaScript theme={null}
  const input = {};
  const response = await fetch('https://api.voicecheap.ai/.well-known/oauth-protected-resource/mcp', {
    method: 'GET',
    headers: {},
    redirect: 'manual',
  });
  console.log(response.status, await response.text());
  ```

  ```python Python theme={null}
  import os
  import requests

  response = requests.request(
      "GET",
      "https://api.voicecheap.ai/.well-known/oauth-protected-resource/mcp",
      headers={},
      timeout=120,
      allow_redirects=False,
  )
  print(response.status_code, response.text)
  ```
</RequestExample>

## Response

OAuth protected-resource metadata. Both published metadata paths return the same object for the MCP resource.

```json HTTP 200 theme={null}
{
  "resource": "https://api.voicecheap.ai/mcp",
  "resource_name": "VoiceCheap MCP",
  "authorization_servers": ["https://api.voicecheap.ai"],
  "scopes_supported": [
    "account:read",
    "usage:read",
    "settings:read",
    "settings:write",
    "team:read",
    "team:write",
    "projects:read",
    "projects:write",
    "projects:delete",
    "translations:write",
    "transcription:read",
    "transcription:write",
    "subtitles:read",
    "subtitles:write",
    "tts:read",
    "tts:write",
    "voices:read",
    "voices:write",
    "images:read",
    "images:write",
    "thumbnails:read",
    "thumbnails:write",
    "folders:read",
    "folders:write",
    "glossary:read",
    "glossary:write",
    "webhooks:read",
    "webhooks:write",
    "publishing:read",
    "publishing:write"
  ],
  "bearer_methods_supported": ["header"]
}
```

## Operation notes

* Use resource exactly as returned when building authorization and token requests. Do not substitute /v1, append a slash, or use another environment's origin.
* The resource accepts bearer credentials through HTTP headers. Query-string credentials are rejected by MCP authentication.
* scopes\_supported contains product permissions only; offline\_access appears in authorization-server metadata instead.
* An unauthenticated /mcp response advertises the /mcp-specific metadata path in WWW-Authenticate.
* The production resource is [https://api.voicecheap.ai/mcp](https://api.voicecheap.ai/mcp). The default development resource is [https://dev.api.voicecheap.ai/mcp](https://dev.api.voicecheap.ai/mcp); deployments may publish a different canonical development origin.

## Errors

| HTTP status | Code | Meaning or recovery |
| - | - | - |
| 429 | `temporarily_unavailable` | The public OAuth request rate limit was reached. Wait for the current window before retrying. |
| 500 | `server_error` | Authorization is temporarily unavailable. Retry later. |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.