| Exceptions | |
|---|---|
| AuthorizationGrantRejectedException | Thrown when an authorization server refuses a token request because the grant presented is spent. |
| AuthorizationServerMismatchException | Thrown when supplied client credentials belong to an authorization server other than the one the protected resource now names. |
| ClientRegistrationRejectedException | Thrown when an authorization server does not recognise the client identifier presented to it. |
| ClientRegistrationRequiredException | Thrown when an authorization server offers no registration mechanism the client can use. |
| InsecureAuthorizationEndpointException | Thrown when an authorization endpoint would be contacted over plain HTTP from a host that is not loopback. |
| InsufficientScopeException | Thrown when an MCP server answers that the token's scopes are insufficient and no scope upgrade is available. |
| InvalidAuthorizationResponseException | Thrown when an authorization response cannot be trusted. |
| MalformedAuthorizationResponseException | Thrown when an authorization or metadata endpoint answers with something other than a JSON object. |
| PkceNotSupportedException | Thrown when an authorization server does not advertise the |
| RedirectRefusedException | Thrown when a response arrived from a URL other than the one the request was sent to. |
| ServerCapabilityNotSupportedException | Thrown when a request targets a capability the server did not advertise in its |
| SubscriptionDeliveryDroppedException | Thrown when a subscription stream ended because the client shed one of its deliveries. |
| UntrustedAuthorizationMetadataException | Thrown when a metadata document names a subject other than the one whose URL served it. |