OAuth
Exchange a code or refresh token for tokens
Form-encoded per RFC 6749. authorization_code needs code, redirect_uri, client_id and code_verifier; refresh_token needs refresh_token and client_id. Refresh tokens rotate on every use; presenting a used one revokes the whole grant. Access tokens live one hour, refresh tokens thirty days. Confidential clients authenticate with HTTP Basic or client_secret in the form.
post/oauth/token
Request
- Base URL: https://api.honkio.ca
- URL: https://api.honkio.ca/oauth/token
- Auth: none required
Response
Tokens. The access token is presented as a Bearer to the MCP endpoint.
Changes
No recorded changes to this operation across all 1 revision of this API.