COconsensys
OAuth

OAuth authorization-code callback

Changed on

Redirect target registered with the authorization server. Validates the one-shot state, exchanges the code for tokens, persists them for the initiating user, and returns a small HTML page that notifies the opener window via postMessage and closes itself.

get/api/oauth/{serverId}/callback

Request

  • Base URL
    /api/plugins/consensys-asko11y-app/resources (relative, and the document was published on a file host, not at the API’s origin)
  • Auth
    • API key in cookie grafana_session
    • or HTTP bearer

Path parameters

serverIdstring required

MCP server ID

Query parameters

codestring

Authorization code issued by the provider

statestring

Opaque one-shot state issued at /start

errorstring

Provider error code when the grant was denied

Response

HTML page reporting the outcome to the opener window

Changes