Connectors

Mint connector MCP token

Validates an active non-revoked connection, exact audience, granted scope subset, current catalog availability, and current entitlement. OAuth credentials are refreshed and rotated server-side, then rowboat-api returns an RS256 product token carrying bounded actor claims. Provider tokens and API keys are never returned.

post/v1/connectors/{name}/resource-token

Request

Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
URL: /v1/connectors/{name}/resource-token
Auth: HTTP bearer

Path parameters

namestring required

Connector slug.

Example:canvas

Connector slug, for example canvas, corinthian, or wispr.

Request body

audiencestring nullable

Must exactly match the connector and stored connection audience.

requestedScopesstring[]

Must be a subset of currently granted scopes.

Example request

{
  "audience": "mcp:canvas",
  "requestedScopes": [
    "canvas:invoices.read"
  ]
}

Response

MCP token and endpoint.

access_tokenstring required

RS256 broker bearer token. This is never a provider access token or vendor API key.

audiencestring required

Exact product resource-server audience.

connectionIdstring required

Connection UUID embedded in the token actor claims.

expires_atinteger required

Unix expiry timestamp in seconds.

expires_ininteger required

Remaining lifetime in seconds. Never exceeds 900.

mcpUrlstring required

Connector MCP endpoint URL.

scopestring required

Space-delimited granted scope subset.

scopesstring[] required

Validated minted scope subset.

tokenstring required

Alias for access_token used by RFC 012 clients.

token_typestring required

OAuth token type.

Example response

{
  "access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImJyb2tlci0yMDI2LTA4In0...",
  "audience": "mcp:canvas",
  "connectionId": "123e4567-e89b-12d3-a456-426614174000",
  "expires_at": 1790784000,
  "expires_in": 300,
  "mcpUrl": "https://api.canvas.solomon-ai.co/v1/mcp",
  "scope": "canvas:invoices.read",
  "scopes": [
    "canvas:invoices.read"
  ],
  "token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImJyb2tlci0yMDI2LTA4In0...",
  "token_type": "Bearer"
}

Changes

No operation changes recorded.