{  "resource": {    "id": "string",    "version": "string",    "name": "string",    "scopes": {      "permissionsScopes": [        {          "name": "string",          "description": "string",          "optional": true,          "values": [            "string"          ]        }      ],      "attributesScopes": [        {          "name": "string",          "description": "string",          "optional": true,          "values": [            "string"          ]        }      ],      "connectionsScopes": [        {          "name": "string",          "description": "string",          "optional": true,          "values": [            "string"          ]        }      ]    },    "createdTime": "string",    "modifiedTime": "string",    "userAccess": "string",    "clientAccess": "string",    "description": "string",    "uri": "string",    "type": "api",    "dynamicRegistrationSettings": {      "dynamicRegistration": {        "enabled": true,        "disableApprovedScopesAsDefault": true,        "flowId": "string"      },      "cimdSettings": {        "enabled": true,        "domainPolicies": {          "policies": [            {              "domainPattern": "string",              "enabled": true            }          ]        }      },      "dynamicRegistrationTemplateId": "string",      "useTemplate": true,      "loginPageURL": "string",      "skipConsentScreen": true,      "forceAddAllAuthorizationInfo": true,      "tags": [        "string"      ],      "sessionSettings": {        "enabled": true,        "refreshTokenExpiration": 0,        "refreshTokenExpirationUnit": "string",        "sessionTokenExpiration": 0,        "sessionTokenExpirationUnit": "string",        "userTemplateId": "string",        "keyTemplateId": "string",        "keySessionTokenExpiration": 0,        "keySessionTokenExpirationUnit": "string"      },      "fallbackClientLogo": "string",      "overrideProjectSettings": true,      "issuerType": "string"    },    "idJagTarget": {      "authorizationServer": "string",      "targetTenant": "string"    }  }}

export interface Response {/** * Resource CRUD messages */resource?: {id: stringversion?: stringname: stringscopes?: {permissionsScopes?: {name: stringdescription?: stringoptional?: booleanvalues?: string[]}[]attributesScopes?: {name: stringdescription?: stringoptional?: booleanvalues?: string[]}[]connectionsScopes?: Projectv1[]}createdTime?: stringmodifiedTime?: string/** * User access to the resource: allow, deny or allowViaPolicy. */userAccess?: string/** * Client access to the resource: allow, deny or allowViaPolicy. */clientAccess?: stringdescription?: string/** * Resource URI, used as the access token audience. For an MCP server, this is the MCP server URL and is required. */uri: string/** * The kind of Resource, either `api` for an API Resource or `mcp` for an MCP Server Resource. `dynamicRegistrationSettings` applies only when `type` is `mcp`. */type?: ("api" | "mcp")/** * Client registration settings (DCR, CIMD, login page and client defaults). Used by MCP servers. */dynamicRegistrationSettings?: DynamicRegistrationSettingsidJagTarget?: IdJagTargetSettings}}/** * Keep this message synchronized with the matching one in ManagementService */export interface Projectv1 {name: stringdescription?: stringoptional?: booleanvalues?: string[]}/** * DynamicRegistrationSettings groups the DCR/CIMD configuration plus inline *  client-side defaults for an mcp-typed Resource. Only meaningful when the *  parent Resource has type=mcp. *  *  When useTemplate is true, the resource MUST reference a non-empty *  dynamicRegistrationTemplateId, and the client defaults *  (loginPageURL, sessionSettings, skipConsentScreen, *  forceAddAllAuthorizationInfo, tags, plus template-only approvedCallbackUrls *  and logo) are sourced from that template. When useTemplate is false, the *  inline fields on this message are used directly. */export interface DynamicRegistrationSettings {/** * Dynamic client registration (DCR) for MCP clients. Ignored when issuerType is project, where *  registration is enabled in the project OIDC settings instead. */dynamicRegistration?: Projectv11/** * Client ID metadata document (CIMD) settings for MCP clients. */cimdSettings?: {enabled?: booleandomainPolicies?: CIMDDomainPolicies}/** * ID of the dynamic registration template to source client defaults from. Required when useTemplate is true. */dynamicRegistrationTemplateId?: string/** * When true, client defaults come from the template referenced by dynamicRegistrationTemplateId instead of the inline fields. */useTemplate?: boolean/** * Login page URL that clients registered for this resource send users to. Required when DCR or CIMD is enabled, *  unless useTemplate is true or issuerType is project. */loginPageURL?: stringskipConsentScreen?: booleanforceAddAllAuthorizationInfo?: booleantags?: string[]sessionSettings?: {enabled?: booleanrefreshTokenExpiration?: numberrefreshTokenExpirationUnit?: stringsessionTokenExpiration?: numbersessionTokenExpirationUnit?: stringuserTemplateId?: stringkeyTemplateId?: stringkeySessionTokenExpiration?: numberkeySessionTokenExpirationUnit?: string}fallbackClientLogo?: string/** * optional so an update that omits it keeps the stored value instead of resetting it. */overrideProjectSettings?: boolean/** * OAuth issuer the MCP server advertises: project (the project OIDC issuer) or mcpServer (a per-server issuer). *  Defaults on create based on the project, and keeps its stored value when omitted on update. */issuerType?: string}export interface Projectv11 {enabled?: booleandisableApprovedScopesAsDefault?: booleanflowId?: string}export interface CIMDDomainPolicies {/** * @maxItems 100 */policies?: CIMDDomainPolicy[]}export interface CIMDDomainPolicy {domainPattern: stringenabled?: boolean}/** * IdJagTargetSettings configures the ID-JAG (Cross App Access) assertion an inbound *  app receives when it exchanges a token for this api-typed Resource: an external *  server (typically a remote MCP server) protected by another authorization server. *  The values describe the TARGET system that will accept the assertion, not this *  project. Not allowed on mcp-typed Resources, which this project protects itself. */export interface IdJagTargetSettings {authorizationServer: stringtargetTenant?: string}