Device authorization

Start a device authorization

An agent starts the RFC 8628-shaped flow here (no credential required), shows the human the user_code / verification_uri, then polls /auth/device/token. Rate-limited per IP.

post/auth/device/code

Request

  • Base URL: https://dungbeetle.dev
  • URL: https://dungbeetle.dev/auth/device/code
  • Auth: none required

Request body

labelstring

Agent display name, shown to the approving human.

scopesAgentScope[]

Requested scopes. Defaults to the Triage preset (runs:read, baselines:read, analytics:read, reviews:write).

Response

Authorization created.

device_codestring required

High-entropy redemption secret. Keep private.

user_codestring required

Short human code, shown as XXXX-XXXX.

verification_uristring required
verification_uri_completestring required
expires_ininteger required

Seconds until the code expires (10 minutes).

intervalinteger required

Minimum polling interval in seconds.

Changes

No recorded changes to this operation across all 1 revision of this API.