WWW-Authenticate

Also written: Bearer

The HTTP header on a 401 response that tells clients how to authenticate, and in MCP's OAuth flow where to find the protected resource metadata.