---
title: "Connections Oauth Callback"
method: GET
path: "/connections/oauth/callback"
---

# Connections Oauth Callback

`GET /connections/oauth/callback`

## Request

- Base URL: `https://www.clipzyn.com/v1`
- URL: `https://www.clipzyn.com/v1/connections/oauth/callback`
- Auth: HTTP bearer

OAuth redirect landing. Authenticated by its signed state, not a bearer key.

The provider sends the owner's browser here, so no Authorization header can
exist; the state is the credential. It is verified in constant time, expires,
and is spendable once, while the connection is still pending. Every refusal is
the same not_found, so nothing about a connection id, an expiry, or a replay
is disclosed. Do not retry a not_found; start again with POST /v1/connections.
On success the token is sealed and the connection becomes active. Requires the explicitly minted `bernayser:write` scope; bernayser:read permits safe projections and bernayser:write permits mutations. This BERNAYSER operation is quota-neutral. While dark it returns not_found, and a valid key without the required scope receives scope_missing. Fix a non-retryable request or credential before retrying; for rate_limited or service_unavailable, wait for retry_after_sec and retry once.

## Query parameters

- `state` string, nullable
- `code` string, nullable

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/clipzyn/apis/clipzyn-api.md) · [All operations](https://skmtc.dev/clipzyn/apis/clipzyn-api/llms.txt) · [OpenAPI document](https://skmtc.dev/clipzyn/apis/clipzyn-api/revisions/a0f30a836536?raw)
