mcp

Issue one short-lived PKCE code only after an explicit same-origin browser decision.

post/api/v1/mcp/consent

Request

  • The document declares no server URL.
  • Auth: none declared

Cookies

longlink_authstring nullable

Request body

statestring required
scope'mcp'
resourcestring required
client_idstring uuid required
redirect_uristring required
response_type'code' required
code_challengestring required
code_challenge_method'S256' required
approveboolean required

Response

Successful Response

urlstring required

Changes