# `Anubis.Client.Authorization.Metadata`

Validated discovery information for a host application's OAuth client.

Include `resource` in both authorization and token requests (RFC 8707).
`mcp_url` remains the endpoint to connect to, even if root metadata describes
a broader resource. `scopes_supported` comes from the protected resource;
a challenge's `scope` remains separate and takes precedence for that request.

# `t`

```elixir
@type t() :: %Anubis.Client.Authorization.Metadata{
  authorization_endpoint: String.t(),
  authorization_server: String.t(),
  challenge: Anubis.Client.Authorization.Challenge.t() | nil,
  client_id_metadata_document_supported: boolean(),
  code_challenge_methods_supported: [String.t()],
  grant_types_supported: [String.t()],
  mcp_url: String.t(),
  registration_endpoint: String.t() | nil,
  resource: String.t(),
  resource_metadata_uri: String.t(),
  response_types_supported: [String.t()],
  scopes_supported: [String.t()],
  token_endpoint: String.t(),
  token_endpoint_auth_methods_supported: [String.t()]
}
```

---

*Consult [api-reference.md](api-reference.md) for complete listing*
