/**
 * /.well-known/oauth-protected-resource — RFC 9728 Protected Resource Metadata
 *
 * Tells an OAuth 2.1 client which authorization server(s) issue tokens for
 * this resource (the MCP server) and which bearer-token transport methods
 * are accepted. Claude.ai reads this in response to the `WWW-Authenticate`
 * header on a 401 from /mcp (RFC 9728 §5.1).
 *
 * Spec: https://datatracker.ietf.org/doc/html/rfc9728
 *
 * No authentication required — this endpoint is public discovery.
 *
 * Locked by src/oauth-protected-resource.contract.test.ts.
 */
import type { VercelRequest, VercelResponse } from "./_types.js";
export default function handler(req: VercelRequest, res: VercelResponse): VercelResponse | undefined;