See bankapi-mcp-001-ctcahwhschgrdqb4.westeurope-01.azurewebsites.net/.well-known/oauth-protected-resource, the resource field is http://[::]:8080, that's invalid. It should be user defined, because when you host the server, there can be a proxy behind the server, which you want to route the requests through. This is a value that the mcp server can't possibly know about at runtime.
If you just start it locally with a debug session, the value is http://localhost:5200, which is correct.
You can see my implementation at: https://github.com/erwinkramer/bank-api/blob/main/BankApi.Mcp/Builder.MCP.cs
See bankapi-mcp-001-ctcahwhschgrdqb4.westeurope-01.azurewebsites.net/.well-known/oauth-protected-resource, the resource field is
http://[::]:8080, that's invalid. It should be user defined, because when you host the server, there can be a proxy behind the server, which you want to route the requests through. This is a value that the mcp server can't possibly know about at runtime.If you just start it locally with a debug session, the value is
http://localhost:5200, which is correct.You can see my implementation at: https://github.com/erwinkramer/bank-api/blob/main/BankApi.Mcp/Builder.MCP.cs