---
title: "Authenticate the current MCP bearer and resource"
method: GET
path: "/oauth/mcp-token"
tags: ["OAuth"]
---

# Authenticate the current MCP bearer and resource

`GET /oauth/mcp-token`

## Request

- Base URL: `https://api.purplegrain.com`
- URL: `https://api.purplegrain.com/oauth/mcp-token`
- Auth: HTTP bearer

Used by the MCP transport before every request. Requires a live human-backed MCP token for the configured resource, never accepts query/body tokens, and returns no credentials or personal data. Uncached.

## Response `200`

Current bearer is valid for the MCP resource.

- object
  - `active` true, required
  - `resource` string, uri, required
  - `scopes` string[], required
  - `client_id` string, required

## Other responses

- `401`: Missing, invalid, expired, revoked, wrong-channel or wrong-resource bearer. Includes an OAuth resource-metadata challenge.

---

[API](https://skmtc.dev/purplegrain/apis/purple-grain-api.md) · [All operations](https://skmtc.dev/purplegrain/apis/purple-grain-api/llms.txt) · [OpenAPI document](https://skmtc.dev/purplegrain/apis/purple-grain-api/revisions/4bedbc1c784c?raw)