---
title: "Check a plugin install link before showing its consent page"
method: GET
path: "/api/v1/plugins/{plugin}/install/validate"
tags: ["Management"]
---

# Check a plugin install link before showing its consent page

`GET /api/v1/plugins/{plugin}/install/validate`

## Request

- Base URL: `https://entire.io` (the document declares no server; this is the origin it was published from)
- URL: `https://entire.io/api/v1/plugins/{plugin}/install/validate`
- Auth: none declared

Core validates redirect_uri and state. The consent route checks both again, so this answer is advisory.

## Path parameters

- `plugin` string, required

## Query parameters

- `redirect_uri` string
- `state` string

## Response `200`

The link is one this plugin may redirect to

- object
  - `ok` true, required
  - `cancel_url` string: Where Cancel sends the browser: redirect_uri with error=access_denied and state.

## Other responses

- `400`: redirect_uri is not allowed, or state is missing or too long
- `401`: Not authenticated
- `403`: Feature not enabled

## Changes

- **2026-09-29** `6baaaae55de0`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/entire/apis/entire-api/changes/api/v1/plugins/:plugin/install/validate/get.md)

---

[API](https://skmtc.dev/entire/apis/entire-api.md) - [All operations](https://skmtc.dev/entire/apis/entire-api/llms.txt) - [OpenAPI document](https://skmtc.dev/entire/apis/entire-api/revisions/a24dfcc828d7?raw)