generated: '2026-07-18'
method: searched
status: published
source: https://api.eu-west-1.aws.dash0.com/.well-known/oauth-protected-resource
server:
  name: dash0
  transport: http
  url: https://api.<region>.aws.dash0.com/mcp
  regions:
  - https://api.eu-west-1.aws.dash0.com/mcp
  - https://api.eu-central-1.aws.dash0.com/mcp
  - https://api.us-west-2.aws.dash0.com/mcp
  - https://api.europe-west4.gcp.dash0.com/mcp
  auth:
    type: oauth2
    protected_resource_metadata: /.well-known/oauth-protected-resource
    authorization_server_metadata: /.well-known/oauth-authorization-server
    grant_types:
    - authorization_code
    - refresh_token
    pkce: S256
    dynamic_client_registration: true
    scopes_supported:
    - '*'
notes: Dash0 runs an OAuth-protected, remote MCP server co-located on the API host at /mcp (returns HTTP
  401 without a bearer token). The API advertises RFC 9728 Protected Resource Metadata explicitly for
  MCP clients, and RFC 8414 Authorization Server Metadata with dynamic client registration (RFC 7591)
  and PKCE, so MCP clients can self-register and complete the browser OAuth flow. The candidate tool surface
  below mirrors the read/query side of the public API (108 operations across 18 tag groups); the live
  tool list is enumerated by the server after authentication.
candidate_tools:
- name: query_sql
  description: Execute a SQL query over telemetry and return JSON results.
  source_operation: openapi/dash0-openapi.json#post_api-sql
- name: query_spans
  description: Return OTLP spans matching filters.
  source_operation: openapi/dash0-openapi.json#post_api-spans
- name: query_logs
  description: Return OTLP log records matching filters.
  source_operation: openapi/dash0-openapi.json#post_api-logs
- name: get_trace
  description: Return the spans and log records associated with a trace ID.
  source_operation: openapi/dash0-openapi.json#post_api-trace-details
- name: prometheus_query_range
  description: Evaluate a PromQL expression over a time range.
  source_operation: openapi/dash0-openapi.json#post_api-prometheus-api-v1-query-range
- name: list_dashboards
  description: Receive a list of organization dashboards.
  source_operation: openapi/dash0-openapi.json#get_api-dashboards
- name: upsert_dashboard
  description: Create or update a dashboard by origin or id.
  source_operation: openapi/dash0-openapi.json#put_api-dashboards-originorid
- name: list_check_rules
  description: Retrieve a list of alerting check rule ids.
  source_operation: openapi/dash0-openapi.json#get_api-alerting-check-rules
- name: upsert_check_rule
  description: Create or update a Prometheus alert (check) rule by origin or id.
  source_operation: openapi/dash0-openapi.json#put_api-alerting-check-rules-originorid
deployment:
  mode: remote
  endpoint: https://api.eu-west-1.aws.dash0.com/mcp
  verified: probed
  probe: gated
  checked: '2026-09-11'
  source: wall re-adjudication 2026-09-11 (RFC 9728 / JSON-RPC envelope)
  probe_prior: wall
  probe_why: RFC 9728 challenge on the MCP path only