2 References

2.1 Normative references

Editor's Note: As a Technical Report (TR) is entirely informative it shall not list normative references.

The following referenced documents are necessary for the application of the present document.

Not applicable.

2.2 Informative references

Editor's Note: Clause 2.2 shall only contain informative references which are cited in the document itself.

References are either specific (identified by date of publication and/or edition number or version number) or nonspecific. For specific references,only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies.

The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particular subject area.

[i.1] oneM2M Drafting Rules https://member.onem2m.org/static_Pages/others/Rules_Pages/oneM2M-Drafting-Rules-V1%202%202.doc

[i.2] IETF RFC 7519: JSON Web Token (JWT) https://www.rfc-editor.org/info/rfc7519

[i.3] IETF RFC 9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens https://www.rfc-editor.org/info/rfc9068

[i.4] oneM2M TS-0033: Interworking Framework

[i.5] oneM2M TS-0003: Security Solutions

[i.6] IETF Internet-Draft: The OAuth 2.1 Authorization Framework https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/

[i.7] Model Context Protocol Specification: Authorization (2025-11-25) https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization

[i.8] IETF RFC 8414: OAuth 2.0 Authorization Server Metadata https://www.rfc-editor.org/info/rfc8414

[i.9] IETF Internet-Draft: OAuth Client ID Metadata Document https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/

[i.10] IETF RFC 7591: OAuth 2.0 Dynamic Client Registration Protocol https://www.rfc-editor.org/info/rfc7591

[i.11] IETF RFC 7009: OAuth 2.0 Token Revocation https://www.rfc-editor.org/info/rfc7009

[i.12] IETF RFC 7517: JSON Web Key (JWK) https://www.rfc-editor.org/info/rfc7517

[i.13] IETF RFC 9728: OAuth 2.0 Protected Resource Metadata https://www.rfc-editor.org/info/rfc9728

[i.14] IETF RFC 8707: Resource Indicators for OAuth 2.0 https://www.rfc-editor.org/info/rfc8707

[i.15] IETF RFC 7636: Proof Key for Code Exchange by OAuth Public Clients https://www.rfc-editor.org/info/rfc7636

[i.16] IETF RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage https://www.rfc-editor.org/info/rfc6750

[i.17] ISO/IEC 22989:2022 Information technology — Artificial intelligence — Artificial intelligence concepts and terminology https://www.iso.org/standard/74296.html

[i.18] Introduction page for the Model Context Protocol https://modelcontextprotocol.io/introduction

[i.19] Startpage HTML living standard https://html.spec.whatwg.org/multipage/

[i.20] Introduction Server Side Events https://html.spec.whatwg.org/multipage/server-sent-events.html

[i.21] JSON RPC Specification https://www.jsonrpc.org/

[i.22] "Tools, Not Endpoints: The Layered MCP Pattern for Task-Centric Agents", MCP Developers Summit EU 2025, available at https://www.youtube.com/watch?v=fulofLB7bZk