Incorrect `ProtectedResourceMetadata` model for oauth authentication

[l-peron]

Initial Checks

• I confirm that I'm using the latest version of MCP Python SDK
• I confirm that I searched for my issue in https://github.com/modelcontextprotocol/python-sdk/issues before opening this issue

Description

It looks like that the “authorization_servers” field is incorrect (https://github.com/modelcontextprotocol/python-sdk/blob/main/src/mcp/shared/auth.py#L138). It should be optional as defined in the RFC.

This issue does not exist in the TS SDK: https://github.com/modelcontextprotocol/typescript-sdk/blob/main/packages/core/src/shared/auth.ts#L32

Example Code

Python & MCP Python SDK

v1.26.0