OAuth
MCP

MCP inspector OAuth token exchange proxy

Exchanges authorization codes or refresh tokens for the local MCP inspector. Proxies to Supabase OAuth token exchange while keeping anon key usage server-side.

post/oauth/mcp-inspector/token

Request

  • Base URL: https://api.apphandoff.com/api
  • URL: https://api.apphandoff.com/api/oauth/mcp-inspector/token
  • Auth: none required

Request body

grant_type'authorization_code' | 'refresh_token' required
codestring

Required when grant_type is authorization_code

redirect_uristring

Must be localhost/127.0.0.1 HTTP or https://local.apphandoff.com

code_verifierstring

PKCE code verifier (43-128 chars) for authorization_code flow

refresh_tokenstring

Required when grant_type is refresh_token

client_idstring uuid required

Response

Token exchange payload from Supabase

object required

Changes

No recorded changes to this operation across all 1 revision of this API.