---
title: "App MCP consent decision"
method: POST
path: "/_run402/oauth/authorize"
tags: ["Stable Hosts"]
---

# App MCP consent decision

`POST /_run402/oauth/authorize`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/_run402/oauth/authorize`
- Auth: none required

The consent form's submission (form token + same Origin). Approve redirects with a single-use `code`, `state`, and `iss`; deny with `error=access_denied`.

## Other responses

- `303`: Back to the client's redirect_uri.
- `403`: Form token or Origin check failed.

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)