OAuth / MCP

Exchange a code, or refresh (RFC 6749 §3.2)

application/x-www-form-urlencoded (JSON is accepted too). authorization_code needs code, code_verifier and the client; refresh_token rotates both tokens -- presenting a refresh token a second time revokes the connection. The access token is a personal access token (whatcha_pat_...) valid for an hour.

post/oauth/token

Request

  • Base URL: https://whatareyoudo.ing/api/v1
  • URL: https://whatareyoudo.ing/api/v1/oauth/token
  • Auth: none declared

Response

Tokens

access_tokenstring required
token_type'Bearer' required
expires_ininteger required
refresh_tokenstring required
scope'read' | 'write' required

Changes

No recorded changes to this operation across all 6 revisions of this API.