---
title: "Read sanitized browser consent context"
method: GET
path: "/auth/agent/context"
---

# Read sanitized browser consent context

`GET /auth/agent/context`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/auth/agent/context`
- Auth: API key in cookie `__Host-superskill_agent_bind`

Requires the HttpOnly binding cookie and returns client, scopes, status and expiry only. Proofs, user identity and tokens are never returned.

## Query parameters

- `request_id` string, required

## Response `200`

Sanitized authorization context

- AgentAuthorizationContext
  - `request` object, required
    - `id` string, required
    - `client` 'codex' | 'claude-code' | 'cli', required
    - `client_name` string, required
    - `scopes` string[], required
    - `expires_at` string, date-time, required
    - `status` 'pending' | 'approved' | 'denied' | 'expired' | 'consumed', required

## Other responses

- `400`: Bad request
- `410`: Authorization request expired

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)