| Exceptions | |
|---|---|
| AuthorizationGrantRejectedException | Thrown when an authorization server refuses a token request because the grant presented is spent. |
| AuthorizationServerMismatchException | Thrown when supplied client credentials belong to an authorization server other than the one now named by the protected resource. |
| ClientRegistrationRejectedException | Thrown when an authorization server does not recognise the client identifier presented to it. |
| ClientRegistrationRequiredException | Thrown when an authorization server offers no registration mechanism that the client can use. |
| InsecureAuthorizationEndpointException | Thrown when an authorization endpoint would be contacted over plain HTTP from a host that is not loopback. |
| InsufficientScopeException | Thrown when an MCP server answers that the token's scopes are insufficient and no scope upgrade is available. |
| InvalidAuthorizationResponseException | Thrown when an authorization response cannot be trusted. |
| MalformedAuthorizationResponseException | Thrown when an authorization or metadata endpoint answers with something other than a JSON object. |
| PkceNotSupportedException | Thrown when an authorization server does not advertise the |
| RedirectRefusedException | Thrown when a response arrived from a URL other than the one that the request was sent to. |
| ServerCapabilityNotSupportedException | Thrown when a request targets a capability not advertised by the server in its |
| SubscriptionDeliveryDroppedException | Thrown when a subscription stream ended because the client shed one of its deliveries. |
| UntrustedAuthorizationMetadataException | Thrown when a metadata document names a subject other than the one whose URL served it. |