{  "resources": [    {      "id": "string",      "version": "string",      "name": "string",      "scopes": {        "permissionsScopes": [          {            "name": "string",            "description": "string",            "optional": true,            "values": [              "string"            ]          }        ],        "attributesScopes": [          {            "name": "string",            "description": "string",            "optional": true,            "values": [              "string"            ]          }        ],        "connectionsScopes": [          {            "name": "string",            "description": "string",            "optional": true,            "values": [              "string"            ]          }        ]      },      "createdTime": "string",      "modifiedTime": "string",      "userAccess": "string",      "clientAccess": "string",      "description": "string",      "uri": "string",      "type": "api",      "dynamicRegistrationSettings": {        "dynamicRegistration": {          "enabled": true,          "disableApprovedScopesAsDefault": true,          "flowId": "string"        },        "cimdSettings": {          "enabled": true,          "domainPolicies": {            "policies": [              {                "domainPattern": "string",                "enabled": true              }            ]          }        },        "dynamicRegistrationTemplateId": "string",        "useTemplate": true,        "loginPageURL": "string",        "skipConsentScreen": true,        "forceAddAllAuthorizationInfo": true,        "tags": [          "string"        ],        "sessionSettings": {          "enabled": true,          "refreshTokenExpiration": 0,          "refreshTokenExpirationUnit": "string",          "sessionTokenExpiration": 0,          "sessionTokenExpirationUnit": "string",          "userTemplateId": "string",          "keyTemplateId": "string",          "keySessionTokenExpiration": 0,          "keySessionTokenExpirationUnit": "string"        },        "fallbackClientLogo": "string",        "overrideProjectSettings": true,        "issuerType": "string"      },      "idJagTarget": {        "authorizationServer": "string",        "targetTenant": "string"      }    }  ],  "total": 0}

export interface Response {resources?: Resource[]total?: number}/** * Resource CRUD messages */export interface Resource {id: stringversion?: stringname: stringscopes?: {permissionsScopes?: {name: stringdescription?: stringoptional?: booleanvalues?: string[]}[]attributesScopes?: {name: stringdescription?: stringoptional?: booleanvalues?: string[]}[]connectionsScopes?: Projectv1[]}createdTime?: stringmodifiedTime?: string/** * User access to the resource: allow, deny or allowViaPolicy. */userAccess?: string/** * Client access to the resource: allow, deny or allowViaPolicy. */clientAccess?: stringdescription?: string/** * Resource URI, used as the access token audience. For an MCP server, this is the MCP server URL and is required. */uri: string/** * The kind of Resource, either `api` for an API Resource or `mcp` for an MCP Server Resource. `dynamicRegistrationSettings` applies only when `type` is `mcp`. */type?: ("api" | "mcp")/** * Client registration settings (DCR, CIMD, login page and client defaults). Used by MCP servers. */dynamicRegistrationSettings?: DynamicRegistrationSettingsidJagTarget?: IdJagTargetSettings}/** * Keep this message synchronized with the matching one in ManagementService */export interface Projectv1 {name: stringdescription?: stringoptional?: booleanvalues?: string[]}/** * DynamicRegistrationSettings groups the DCR/CIMD configuration plus inline *  client-side defaults for an mcp-typed Resource. Only meaningful when the *  parent Resource has type=mcp. *  *  When useTemplate is true, the resource MUST reference a non-empty *  dynamicRegistrationTemplateId, and the client defaults *  (loginPageURL, sessionSettings, skipConsentScreen, *  forceAddAllAuthorizationInfo, tags, plus template-only approvedCallbackUrls *  and logo) are sourced from that template. When useTemplate is false, the *  inline fields on this message are used directly. */export interface DynamicRegistrationSettings {/** * Dynamic client registration (DCR) for MCP clients. Ignored when issuerType is project, where *  registration is enabled in the project OIDC settings instead. */dynamicRegistration?: Projectv11/** * Client ID metadata document (CIMD) settings for MCP clients. */cimdSettings?: {enabled?: booleandomainPolicies?: CIMDDomainPolicies}/** * ID of the dynamic registration template to source client defaults from. Required when useTemplate is true. */dynamicRegistrationTemplateId?: string/** * When true, client defaults come from the template referenced by dynamicRegistrationTemplateId instead of the inline fields. */useTemplate?: boolean/** * Login page URL that clients registered for this resource send users to. Required when DCR or CIMD is enabled, *  unless useTemplate is true or issuerType is project. */loginPageURL?: stringskipConsentScreen?: booleanforceAddAllAuthorizationInfo?: booleantags?: string[]sessionSettings?: {enabled?: booleanrefreshTokenExpiration?: numberrefreshTokenExpirationUnit?: stringsessionTokenExpiration?: numbersessionTokenExpirationUnit?: stringuserTemplateId?: stringkeyTemplateId?: stringkeySessionTokenExpiration?: numberkeySessionTokenExpirationUnit?: string}fallbackClientLogo?: string/** * optional so an update that omits it keeps the stored value instead of resetting it. */overrideProjectSettings?: boolean/** * OAuth issuer the MCP server advertises: project (the project OIDC issuer) or mcpServer (a per-server issuer). *  Defaults on create based on the project, and keeps its stored value when omitted on update. */issuerType?: string}export interface Projectv11 {enabled?: booleandisableApprovedScopesAsDefault?: booleanflowId?: string}export interface CIMDDomainPolicies {/** * @maxItems 100 */policies?: CIMDDomainPolicy[]}export interface CIMDDomainPolicy {domainPattern: stringenabled?: boolean}/** * IdJagTargetSettings configures the ID-JAG (Cross App Access) assertion an inbound *  app receives when it exchanges a token for this api-typed Resource: an external *  server (typically a remote MCP server) protected by another authorization server. *  The values describe the TARGET system that will accept the assertion, not this *  project. Not allowed on mcp-typed Resources, which this project protects itself. */export interface IdJagTargetSettings {authorizationServer: stringtargetTenant?: string}