generated: '2026-09-04'
method: probed
status: published
source: https://www.wayup.com/.well-known/oauth-protected-resource
ownership: >-
  www.wayup.com is a Yello property - Yello acquired WayUp, links it from the yello.co footer as
  "For Candidates", and the Yello status page lists "Yello Sourcing / WayUp" as a Yello component -
  so this MCP server belongs to this company even though it is served from a different domain.
deployment:
  mode: remote
  endpoint: https://www.wayup.com/mcp
  auth: oauth
  verified: probed
server:
  name: wayup
  transport: http
  protocol: streamable-http
  url: https://www.wayup.com/mcp
  documented: false
discovery:
  protected_resource_metadata: https://www.wayup.com/.well-known/oauth-protected-resource
  protected_resource_metadata_scoped: https://www.wayup.com/mcp/.well-known/oauth-protected-resource
  authorization_server_metadata: https://www.wayup.com/.well-known/oauth-authorization-server
  resource: https://www.wayup.com/mcp
  authorization_servers:
  - https://www.wayup.com
  scopes_supported:
  - mcp
  bearer_methods_supported:
  - header
tools: []
tools_status: gated
tools_note: >-
  An unauthenticated POST of {"jsonrpc":"2.0","id":1,"method":"tools/list"} returned HTTP 401 with
  WWW-Authenticate: Bearer resource_metadata="https://www.wayup.com/mcp/.well-known/oauth-protected-resource".
  initialize returns the same 401. The tool names and inputSchemas therefore require an authenticated
  introspection and are NOT recorded here. No published tool list (llms.txt, docs page or registry
  entry) was found to fall back on, so nothing is asserted about the tool surface.
x-evidence:
- fetched: '2026-09-04'
  url: https://www.wayup.com/.well-known/oauth-protected-resource
  method: GET
  http_status: 200
  content_type: application/json
- fetched: '2026-09-04'
  url: https://www.wayup.com/.well-known/oauth-authorization-server
  method: GET
  http_status: 200
  content_type: application/json
- fetched: '2026-09-04'
  url: https://www.wayup.com/mcp
  method: POST tools/list
  http_status: 401
  www_authenticate: Bearer resource_metadata="https://www.wayup.com/mcp/.well-known/oauth-protected-resource"
- fetched: '2026-09-04'
  url: https://www.wayup.com/mcp
  method: GET
  http_status: 405
  body: 'jsonrpc error -32600 Method Not Allowed: server-initiated streams are not supported.'