# Protected Resource Metadata

[3 · Permit](/category/permit/)

| Protected Resource Metadata |
| --- |
| Category | [Permit](/category/permit/) |
| Also known as | RFC 9728 |
| Related | [OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)](/protocols/oauth-metadata-for-agents/) |

[Permit](/category/permit/) An OAuth document, defined in RFC 9728, that tells a client which authorization server protects a resource.

## Instances

Not applicable.

## See also

- [OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)](/protocols/oauth-metadata-for-agents/)

## References

- [https://www.rfc-editor.org/rfc/rfc9728](https://www.rfc-editor.org/rfc/rfc9728) (2026-10-15) VERIFIED

[JSON](/terms/protected-resource-metadata/index.json) · [Markdown](/terms/protected-resource-metadata/index.md)