From f14456d63af321f6c30e034a89ea441385970c80 Mon Sep 17 00:00:00 2001
From: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
Date: Tue, 7 Apr 2026 19:42:10 -0400
Subject: [PATCH] docs: document forward_resource parameter on OAuthProxy
 (#3788)

---
 docs/servers/auth/oauth-proxy.mdx | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/docs/servers/auth/oauth-proxy.mdx b/docs/servers/auth/oauth-proxy.mdx
index 19f5c2cee..73c65b091 100644
--- a/docs/servers/auth/oauth-proxy.mdx
+++ b/docs/servers/auth/oauth-proxy.mdx
@@ -165,6 +165,14 @@ mcp = FastMCP(name="My Server", auth=auth)
   provider doesn't support PKCE
 </ParamField>
 
+<ParamField body="forward_resource" type="bool" default="True">
+  Whether to forward RFC 8707 `resource` parameters from MCP clients to the
+  upstream OAuth provider. When enabled, the proxy includes the resource indicator
+  in authorization requests, allowing providers that support RFC 8707 to scope
+  tokens to specific resources. Disable for providers that reject unknown
+  parameters.
+</ParamField>
+
 <ParamField body="token_endpoint_auth_method" type="str | None">
   Token endpoint authentication method for the upstream OAuth server. Controls
   how the proxy authenticates when exchanging authorization codes and refresh
@@ -386,7 +394,7 @@ auth = OAuthProxy(
 )
 ```
 
-The proxy also automatically forwards RFC 8707 `resource` parameters from MCP clients to upstream providers that support them.
+The proxy also forwards RFC 8707 `resource` parameters from MCP clients to upstream providers that support them. This is enabled by default via the `forward_resource` parameter. Disable it for providers that reject unknown parameters.
 
 ## OAuth Flow