---
title: "Read signed-out device authorization context"
method: GET
path: "/credits/mcp/oauth/device/public-context"
tags: ["MCP"]
---

# Read signed-out device authorization context

`GET /credits/mcp/oauth/device/public-context`

## Request

- Base URL: `https://api.paywithlocus.com/api`
- URL: `https://api.paywithlocus.com/api/credits/mcp/oauth/device/public-context`
- Auth: none required

Returns only the pending client's public name, ID, requested scopes, resource, and expiry for a valid user code. It exposes no Locus identity, membership, or tenant data.

## Query parameters

- `user_code` string, required: Case-insensitive device-code input. Locus ignores non-alphanumeric punctuation, rejects ambiguous characters, and normalizes the six significant characters to XXX-XXX.

## Response `200`

Safe public context

- McpOAuthDevicePublicContextResponse
  - `success` unknown, required
  - `data` object, required
    - `userCode` string, required: Human-readable code that omits ambiguous characters. Display it exactly as returned.
    - `clientName` string, required
    - `clientId` string, required
    - `scopes` string[], required
    - `resource` string, uri, required
    - `expiresAt` string, date-time, required

## Other responses

- `400`: User code is invalid, expired, or no longer pending
- `429`: Too many verification attempts

---

[API](https://skmtc.dev/paywithlocus/apis/locus-pro-api.md) - [All operations](https://skmtc.dev/paywithlocus/apis/locus-pro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/paywithlocus/apis/locus-pro-api/revisions/aab8fa5d6cef?raw)