---
title: "POST /v2/me/x-discovery/oauth-start"
method: POST
path: "/v2/me/x-discovery/oauth-start"
tags: ["Social"]
---

# POST /v2/me/x-discovery/oauth-start

`POST /v2/me/x-discovery/oauth-start`

## Request

- Base URL: `https://api.arbital.xyz` (the document declares no server; this is the origin it was published from)
- URL: `https://api.arbital.xyz/v2/me/x-discovery/oauth-start`
- Auth: HTTP bearer

Creates a one-time X OAuth 2.0 PKCE flow for discovery using only tweet.read, users.read, follows.read, and offline.access. The connected X identity must match the Privy-verified X account.

## Query parameters

- `return_path` string

## Response `200`

One-time X authorization URL

- XDiscoveryAuthorizationStart
  - `authorizationUrl` string, uri, required: Short-lived X OAuth 2.0 PKCE authorization URL. Open it in an external authentication session.

## Other responses

- `400`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.
- `401`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.
- `409`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.
- `413`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.
- `429`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.
- `503`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.

---

[API](https://skmtc.dev/arbital/apis/arbital-api.md) - [All operations](https://skmtc.dev/arbital/apis/arbital-api/llms.txt) - [OpenAPI document](https://skmtc.dev/arbital/apis/arbital-api/revisions/bb0185edf43a?raw)