---
title: "Start MCP OAuth authorization"
method: GET
path: "/credits/mcp/oauth/authorize"
tags: ["MCP"]
---

# Start MCP OAuth authorization

`GET /credits/mcp/oauth/authorize`

## Request

- Base URL: `https://api.paywithlocus.com/api`
- URL: `https://api.paywithlocus.com/api/credits/mcp/oauth/authorize`
- Auth: none required

Starts the public-client Authorization Code flow. PKCE S256 and the exact MCP resource indicator are required; the browser is redirected to Locus consent and then back to the registered redirect URI.

## Query parameters

- `response_type` 'code', required
- `client_id` string, required
- `redirect_uri` string, uri, required
- `code_challenge` string, required
- `code_challenge_method` 'S256', required
- `resource` string, uri, required
- `scope` string
- `state` string

## Other responses

- `302`: Redirect to consent, or to the registered redirect URI with an OAuth error
- `400`: Invalid client or request before a safe redirect URI can be established

---

[API](https://skmtc.dev/paywithlocus/apis/locus-pro-api.md) - [All operations](https://skmtc.dev/paywithlocus/apis/locus-pro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/paywithlocus/apis/locus-pro-api/revisions/aab8fa5d6cef?raw)