---
title: "Start a device authorisation flow"
method: POST
path: "/oauth/device"
tags: ["OAuth"]
---

# Start a device authorisation flow

`POST /oauth/device`

## Request

- The document declares no server URL.
- Auth: none declared

Implements the RFC 8628 device authorisation request. No authentication is required.

## Request body `application/x-www-form-urlencoded`

- object
  - `client_id` string, required
  - `scope` string

## Response `200`

The device and user codes, and the verification URI to display to the user.

- object
  - `device_code` string
  - `expires_in` integer
  - `interval` integer
  - `user_code` string
  - `verification_uri` string
  - `verification_uri_complete` string

## Changes

- **2026-09-28** `d47e9fb78ad0`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/changes/oauth/device/post.md)

---

[API](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api.md) - [All operations](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/llms.txt) - [OpenAPI document](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/revisions/d47e9fb78ad0?raw)