Sign in
AI

Start the vendor OAuth flow for an MCP server connection.

Starts a vendor-fixed OAuth 2.1 authorization-code + PKCE flow so the authenticated customer can connect a GitHub or Linear account to an MCP server without ever handling a client_id/client_secret. Returns the vendor's authorize_url to redirect the user's browser to, plus a link_token used to correlate the eventual POST /mcpservers/oauth/complete call back to this flow.

post/mcpservers/oauth/start

Request body

vendor'github' | 'linear' required

The OAuth vendor to connect to.

mcp_server_idstring uuid

Optional. The ID of an existing customer-owned MCP server (returned from a prior POST /mcpservers response) to reconnect/refresh OAuth credentials for. Omit to create a new MCP server on completion.

Example request

{
  "vendor": "github",
  "mcp_server_id": "0b61dcbe-a770-11ed-bab4-2fc1dac66672"
}

Response

The vendor authorize URL and a correlating link token.

authorize_urlstring uri

Redirect the user's browser here to start the vendor's consent screen.

link_tokenstring

Opaque token correlating this flow to the later POST /mcpservers/oauth/complete call.

Example response

{
  "authorize_url": "https://github.com/login/oauth/authorize?client_id=...&state=...",
  "link_token": "9f2c1e7a4b3d4f5e8a9b0c1d2e3f4a5b"
}

Changes

Changed in 1 of the 97 revisions of this API.1