---
title: "What the consent screen shows for an authorization request"
method: GET
path: "/oauth/consent"
tags: ["OAuth / MCP"]
---

# What the consent screen shows for an authorization request

`GET /oauth/consent`

## Request

- Base URL: `https://whatareyoudo.ing/api/v1`
- URL: `https://whatareyoudo.ing/api/v1/oauth/consent`
- Auth: HTTP bearer

The app passes the authorization request's parameters through unchanged; they are checked again here. Requires a session: an access token cannot approve a grant.

## Query parameters

- `response_type` 'code', required
- `client_id` string, required
- `redirect_uri` string
- `code_challenge` string, required
- `code_challenge_method` 'S256', required
- `state` string
- `scope` string
- `resource` string

## Response `200`

OK

- object
  - `data` OAuthConsentDetails, required
    - `clientName` string, required
    - `redirectHost` string, required
    - `redirectIsLoopback` boolean, required
    - `scope` 'read' | 'write', required
  - `meta` object, required
    - `requestId` string, required

## Other responses

- `403`: The caller is an access token
- `422`: The request is not one this server will grant (`details.oauthError` says why)

---

[API](https://skmtc.dev/whatareyoudo/apis/whatcha-api.md) · [All operations](https://skmtc.dev/whatareyoudo/apis/whatcha-api/llms.txt) · [OpenAPI document](https://skmtc.dev/whatareyoudo/apis/whatcha-api/revisions/48dd8a54abea?raw)