---
title: "Approve a pending MCP authorization with the agent's own credential"
method: POST
path: "/credits/mcp/oauth/authorize/agent-credential"
tags: ["MCP"]
---

# Approve a pending MCP authorization with the agent's own credential

`POST /credits/mcp/oauth/authorize/agent-credential`

## Request

- Base URL: `https://api.paywithlocus.com/api`
- URL: `https://api.paywithlocus.com/api/credits/mcp/oauth/authorize/agent-credential`
- Auth: HTTP bearer

For an agent that created its own workspace (POST /credits/agent/signup or /credits/agent/register). The agent sends the lmo_req_ handle from its MCP client's authorization redirect with the lcac_ credential it received at signup, and receives the client's redirect URL with an authorization code. Credentials a person issued from the dashboard are refused. The resulting connection ends when that credential is revoked, expires, or the human declines the account.

## Request body

- object
  - `request` string, required

## Response `200`

Approved; deliver redirectUrl to the waiting MCP client exactly as returned

## Other responses

- `400`: Authorization request is malformed, expired, or already used
- `403`: Not the credential the agent received when it created its workspace
- `409`: Connection limit reached or request already resolved

---

[API](https://skmtc.dev/paywithlocus/apis/locus-pro-api.md) - [All operations](https://skmtc.dev/paywithlocus/apis/locus-pro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/paywithlocus/apis/locus-pro-api/revisions/aab8fa5d6cef?raw)