Governing Remote MCP Servers: An OAuth Protected Resource Metadata (PRM) Proxy Pattern

Remote MCP servers use OAuth 2.0 with the discovery pattern defined in RFC 9728 (Protected Resource Metadata, or PRM). RFC 9728 requires that the resource field in the PRM document match the URL the client actually called — byte for byte. That single rule is what makes a reverse proxy in front of a remote […] The post Governing Remote MCP Servers: An OAuth Protected Resource Metadata (PRM) Proxy Pattern first appeared on MuleSoft Blog .