Authorize Decision

Handles the user's decision on the MCP consent screen (Approach B).

The POST must come from the browser that was shown the consent page: it has to carry that page's one-time consent_nonce and be signed in as the same user. Without this, anyone holding a state the victim's browser had opened could approve the grant themselves and collect the code.

post/oauth/authorize/decision

Request

  • Base URL: https://fluxito.app (the document declares no server; this is the origin it was published from)
  • URL: https://fluxito.app/oauth/authorize/decision
  • Auth: none declared

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.