Auth

Create or deny an MCP OAuth authorization response

post/mcp/oauth/authorize

Request

  • Base URL: https://app.openpo.st/api/v1
  • URL: https://app.openpo.st/api/v1/mcp/oauth/authorize
  • Auth: one of:
    • HTTP bearer
    • API key in cookie openpost_session

Request body

$schemastring uri

A URL to the JSON Schema for this object.

approvedboolean required

Whether the user approved the MCP OAuth request

client_idstring required

OAuth client ID or client metadata URL

code_challengestring

PKCE S256 code challenge. Required when approved is true.

code_challenge_methodstring

PKCE method. Must be S256 when approved is true.

redirect_uristring required

OAuth redirect URI

resourcestring

MCP protected resource URL

response_typestring required

OAuth response type. Must be code.

scopestring

Space-separated MCP scopes: mcp:read and mcp:full. Requesting both returns both scopes while enforcing mcp:full. Defaults to mcp:full.

statestring

Opaque client state to echo to the redirect URI

workspace_idstring

Optional workspace ID the resulting MCP token is limited to

Example request

{
  "$schema": "https://example.com/api/v1/schemas/CreateMCPOAuthAuthorizationInputBody.json"
}

Response

OK

$schemastring uri

A URL to the JSON Schema for this object.

redirect_urlstring required

URL the browser should redirect to after authorization

Example response

{
  "$schema": "https://example.com/api/v1/schemas/CreateMCPOAuthAuthorizationOutputBody.json"
}

Changes

No recorded changes to this operation across all 1 revision of this API.