---
title: "Begin native provider authorization bound to an app-held PKCE secret"
method: POST
path: "/v1/workspace/auth/native/start"
---

# Begin native provider authorization bound to an app-held PKCE secret

`POST /v1/workspace/auth/native/start`

## Request

- Base URL: `https://api.specstream.ai`
- URL: `https://api.specstream.ai/v1/workspace/auth/native/start`
- Auth: none required

## Request body

- NativeAuthStart
  - `provider` string, required
  - `code_challenge` string, required
  - `email` string, nullable
  - `ref` string, nullable
  - `enroll` boolean
  - `purpose` 'signin' | 'connection'

## Response `200`

Begin native provider authorization bound to an app-held PKCE secret

- object
  - `data` NativeAuthStartData, required
    - `handoff_id` string, required
    - `callback_url` string, required
    - `authorization_url` string, required

## Other responses

- `default`: Error envelope

---

[API](https://skmtc.dev/specstream/apis/specstream-api.md) · [All operations](https://skmtc.dev/specstream/apis/specstream-api/llms.txt) · [OpenAPI document](https://skmtc.dev/specstream/apis/specstream-api/revisions/5a9f51143a13?raw)