---
title: "Read an app authorization request and bind it to the current session"
method: GET
path: "/oauth/requests/{requestId}"
tags: ["Auth"]
---

# Read an app authorization request and bind it to the current session

`GET /oauth/requests/{requestId}`

## Request

- Base URL: `https://api.flashdata.dev/v2`
- URL: `https://api.flashdata.dev/v2/oauth/requests/{requestId}`
- Auth: API key in cookie `__Host-fd_session`

Full session required. Request expires after ten minutes. Response is no-store.

## Response `200`

Requested app permissions

- OAuthConsent
  - `clientName` string, required
  - `scope` 'mcp:research', required
  - `sources` string[], required
  - `redirectUri` string, uri, required
  - `expiresAt` string, date-time, required

## Other responses

- `401`: Authentication required or invalid
- `403`: Authenticated but not permitted, or CSRF validation failed
- `410`: Request expired, used, or bound to another session

---

[API](https://skmtc.dev/flashdata/apis/flashdata-customer-api.md) · [All operations](https://skmtc.dev/flashdata/apis/flashdata-customer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/flashdata/apis/flashdata-customer-api/revisions/109179fe9313?raw)