---
title: "POST /mcp-auth/sessions"
method: POST
path: "/mcp-auth/sessions"
deprecated: true
---

# POST /mcp-auth/sessions

`POST /mcp-auth/sessions`

## Request

- Base URL: `https://api.useanima.sh/v1`
- URL: `https://api.useanima.sh/v1/mcp-auth/sessions`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

> **Deprecated.**

Deprecated: session-based MCP auth was replaced by the OAuth 2.0 Authorization Code + PKCE flow. Always returns 400.

## Request body

- object: No input needed — the server generates the session token

## Response `200`

OK

- object: Newly created MCP auth session
  - `sessionId` string, required: Session ID for the authorize URL
  - `token` string, required: Secret token for polling — keep this on the MCP server side
  - `authUrl` string, uri, required: URL to open in the browser

---

[API](https://skmtc.dev/useanima/apis/anima-api.md) · [All operations](https://skmtc.dev/useanima/apis/anima-api/llms.txt) · [OpenAPI document](https://skmtc.dev/useanima/apis/anima-api/revisions/aaa148188980?raw)