OAuth
Authorize
Authorize an MCP client against the currently-signed-in app user.
Fast path: if the browser sends our humwork_refresh_token cookie, the user is already signed into our app — exchange the refresh token at Auth0, identify the user, mint an MCP code for THEIR API key, and redirect straight to /oauth/success. No Auth0 prompt. This guarantees "whichever account is signed into our app gets the API key."
Slow path (no cookie or refresh failed): redirect to Auth0 Universal Login. Auth0 calls back into /oauth/callback which then mints the code.
get/api/v1/oauth/authorize
Query parameters
client_idstring required
redirect_uristring required
response_typestring required
code_challengestring required
code_challenge_methodstring required
statestring required
scopestring nullable
Response
Successful Response
{"stackTrail":"paths:/api/v1/oauth/authorize:get:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}
Changes
No recorded changes to this endpoint across all 1 revision of this API.