Creates a verifier bound to the resolved canonical MCP resource.
Maps verified SDK auth information into mcp-use callback identity data.
RFC 8414 metadata for the external authorization server.
OptionalrequiredEndpoint-wide scopes enforced by the SDK bearer gate.
OptionalresourceFull canonical public MCP endpoint URL.
OptionalresourceHuman-readable name advertised by protected-resource metadata.
OptionalscopesScopes advertised by protected-resource metadata.
OptionalserviceDocumentation URL advertised by protected-resource metadata.
OptionalsetupOptional hook invoked once while the server mounts. Providers use it to install MCP middleware, provider-owned tools, resources, and prompts, or instructions text that the authorization model requires. See OAuthProviderHost.
The hook must be synchronous. If it throws or returns a promise, the
server never mounts: every request and listen() rethrows that error.
Options for oauthCustomProvider.