Build the ordered list of well-known protected-resource-metadata URLs to try for an MCP endpoint URL, per RFC 9728: the path-scoped URL first, then root.
Build the ordered list of well-known protected-resource-metadata URLs to try for an MCP endpoint URL, per RFC 9728: the path-scoped URL first, then root.