OAuth

Register an OAuth client (RFC 7591)

Dynamic client registration for MCP clients and other apps. Redirect URIs must be https://, loopback http:// (localhost, 127.0.0.1, [::1], any port), or a private-use scheme for a native app (RFC 8252), such as cursor://anysphere.cursor-mcp/oauth/callback. Fragments and schemes a browser handles itself (javascript:, data:, file:, …) are refused. With token_endpoint_auth_method: client_secret_post the response includes a client_secret, shown once, that the client must send to /oauth/token.

post/oauth/register

Request

Base URL: https://api.groundmail.dev
URL: https://api.groundmail.dev/oauth/register
Auth: none required

Request body

client_namestring required

redirect_urisstring[]

Required with the authorization_code grant (the default)

token_endpoint_auth_method'none' | 'client_secret_post'

grant_typesstring[]

Default authorization_code and refresh_token

Example request

{
  "client_name": "Cursor",
  "redirect_uris": [
    "cursor://anysphere.cursor-mcp/oauth/callback"
  ]
}

Response

Client registered

client_idstring required

client_secretstring

Only for client_secret_post clients, shown once

client_id_issued_atinteger required

client_namestring required

redirect_urisstring[] required

token_endpoint_auth_method'none' | 'client_secret_post' required

grant_typesstring[] required

response_typesstring[]

Example response

{
  "client_id": "gm_oauth_0123456789abcdef0123456789abcdef"
}

Changes

No recorded changes to this operation across all 2 revisions of this API.