MCP

Start MCP device authorization

RFC 8628 authorization for a headless public client registered with the device-code grant. Send the exact MCP resource. Locus returns a 15-minute device code, a human-readable user code, and a five-second initial polling interval. Do not send client authentication.

post/credits/mcp/oauth/device_authorization

Request

  • Base URL
    https://api.paywithlocus.com/api
  • URL
    https://api.paywithlocus.com/api/credits/mcp/oauth/device_authorization
  • Auth
    none required

Request body application/x-www-form-urlencoded

client_idstring required
resourcestring uri required

Exact Locus Pro MCP resource URL.

scopestring

Example request

{
  "scope": "mcp:read mcp:execute offline_access"
}

Response

Pending device authorization

device_codestring required

Secret device grant credential. Keep it only in the client that initiated the device flow and do not log it.

user_codestring required

Human-readable code that omits ambiguous characters. Display it exactly as returned.

verification_uristring uri required
verification_uri_completestring uri required
expires_in900 required
interval5 required

Initial minimum token-poll interval in seconds. A slow_down response increases it by five seconds, up to 60 seconds.

Changes

No recorded changes to this operation across all 1 revision of this API.