Alpha. A configured URL: either a fixed value, or derived per request.
The OAuth Protected Resource surface is alpha — the config shape, the contributed context key, and the metadata route may change in a minor release.