{
  "server": "serveros-fleet-mcp",
  "version": "0.1.0",
  "protocol": "MCP Streamable HTTP (JSON-RPC 2.0)",
  "endpoints": {
    "/mcp": "POST JSON-RPC. Requires `Authorization: Bearer <token>`.",
    "/health": "Unauthenticated liveness. No fleet information.",
    "/.well-known/oauth-protected-resource": "RFC 9728 protected-resource metadata.",
    "/.well-known/oauth-authorization-server": "RFC 8414 authorization-server metadata.",
    "/oauth/register": "RFC 7591 dynamic client registration (public clients, PKCE).",
    "/oauth/authorize": "Authorization endpoint. Requires the owner token to approve.",
    "/oauth/token": "Token endpoint. authorization_code and refresh_token.",
    "/oauth/revoke": "RFC 7009 revocation. A revoked client's access tokens are refused immediately, not at their next expiry."
  }
}