---
title: "Authorize Decision"
method: POST
path: "/oauth/authorize/decision"
---

# Authorize Decision

`POST /oauth/authorize/decision`

## Request

- Base URL: `https://fluxito.app` (the document declares no server; this is the origin it was published from)
- URL: `https://fluxito.app/oauth/authorize/decision`
- Auth: none declared

Handles the user's decision on the MCP consent screen (Approach B).

The POST must come from the browser that was shown the consent page: it
has to carry that page's one-time ``consent_nonce`` and be signed in as the
same user. Without this, anyone holding a ``state`` the victim's browser
had opened could approve the grant themselves and collect the code.

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/fluxito/apis/fluxito-platform.md) · [All operations](https://skmtc.dev/fluxito/apis/fluxito-platform/llms.txt) · [OpenAPI document](https://skmtc.dev/fluxito/apis/fluxito-platform/revisions/d558e1fe9a04?raw)