The canonical resource identifier for this server (RFC 8707). When set,
the transport enforces that a validated token's audience includes it, and
publishes it as resource in the metadata document.
REQUIRED for spec compliance: basic/authorization §Access Token Privilege
Restriction says MCP servers MUST reject tokens that do not name them in the
audience claim. When this is empty authorize() fails closed (rejecting
every token) unless allowAnyAudience is set.
The canonical resource identifier for this server (RFC 8707). When set, the transport enforces that a validated token's audience includes it, and publishes it as resource in the metadata document.
REQUIRED for spec compliance: basic/authorization §Access Token Privilege Restriction says MCP servers MUST reject tokens that do not name them in the audience claim. When this is empty authorize() fails closed (rejecting every token) unless allowAnyAudience is set.