SUsupersetapp
agent-auth

OAuth 2.1 authorization endpoint (PKCE)

The consent screen an MCP connector sends a person to. Standard authorization-code flow with S256 PKCE; parameters and the supported grants are published in /.well-known/oauth-authorization-server.

get/oauth2/authorize

Request

  • Base URL
    https://www.supersetapp.com
  • URL
    https://www.supersetapp.com/oauth2/authorize
  • Auth
    none required

Query parameters

response_typestring required
Example:code

Always code.

client_idstring required

The connector's client identifier.

redirect_uristring uri required

Where to return the code.

code_challengestring required

PKCE challenge.

code_challenge_methodstring required
Example:S256

Always S256.

scopestring

Space-separated scopes to request.

statestring

Opaque value returned unchanged.

resourcestring uri

The MCP URL being authorized. Optional per RFC 8707; omitting it authorizes the workout MCP resource.

Response

The consent screen (HTML).

Changes

No recorded changes to this operation across all 1 revision of this API.