OAuth

Return a validated denial callback

Public first-party consent helper. Applies the same validation as approval and returns the registered callback carrying access_denied and state. Creates no grant.

post/oauth/authorize/deny

Request

  • Base URL: https://api.purplegrain.com
  • URL: https://api.purplegrain.com/oauth/authorize/deny
  • Auth: none required

Request body

client_idstring required
response_type'code' required
redirect_uristring uri required
scopestring
statestring
code_challengestring required

PKCE code challenge (S256).

code_challenge_method'S256' required
noncestring
resourcestring uri

The exact MCP resource URI advertised by discovery. Omission uses that resource for existing clients.

Response

Validated callback carrying the OAuth denial.

redirect_uristring uri

Changes

No recorded changes to this operation across all 3 revisions of this API.