---
title: "Oauth Preflight"
method: GET
path: "/v1/mcp-oauth/preflight"
tags: ["v1", "protected", "mcp-oauth-connect"]
---

# Oauth Preflight

`GET /v1/mcp-oauth/preflight`

Report whether this instance can be authorized, and with what.

Every outcome is a 200: "this server has no OAuth" is an answer the UI
renders, not a failure it has to decode from an error response.

## Query parameters

- `instance_id` string, uuid, required — MCP instance to inspect

## Response `200`

Successful Response

- MCPOAuthPreflightResponse — What the UI needs before it can offer a Connect action. ``ready`` — Connect can run unattended (the server supports DCR). ``oauth_app_required`` — ask for a client ID/secret first. ``unsupported`` — this server cannot be authorized this way; say why.
  - `authorization_endpoint` string, nullable
  - `connected` boolean, required
  - `detail` string
  - `instance_id` string, uuid, required
  - `issuer` string, nullable
  - `scopes` string[]
  - `status` 'ready' | 'oauth_app_required' | 'unsupported', required

## Other responses

- `422` — Validation Error

## Changes

- **2026-09-23** `7eafe882ff77` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/agentarea/apis/agentarea-api/changes/v1/mcp-oauth/preflight/get.md)

---

[API](https://skmtc.dev/agentarea/apis/agentarea-api.md) · [All operations](https://skmtc.dev/agentarea/apis/agentarea-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentarea/apis/agentarea-api/revisions/7eafe882ff77?raw)