From 7fbe3ee39bce8fabdca4897fde691a44ac17bbcd Mon Sep 17 00:00:00 2001 From: Daniel Mikusa Date: Sat, 6 Sep 2025 12:20:38 -0400 Subject: [PATCH] Protected resource advertises valid scopes, if available (#1742) --- src/fastmcp/server/auth/auth.py | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/fastmcp/server/auth/auth.py b/src/fastmcp/server/auth/auth.py index 4a254721d..760c94d69 100644 --- a/src/fastmcp/server/auth/auth.py +++ b/src/fastmcp/server/auth/auth.py @@ -353,10 +353,16 @@ class OAuthProvider( # Add protected resource routes if this server is also acting as a resource server if resource_url: + supported_scopes = ( + self.client_registration_options.valid_scopes + if self.client_registration_options + and self.client_registration_options.valid_scopes + else self.required_scopes + ) protected_routes = create_protected_resource_routes( resource_url=resource_url, authorization_servers=[self.issuer_url], - scopes_supported=self.required_scopes, + scopes_supported=supported_scopes, ) oauth_routes.extend(protected_routes)