XQxquik-dev
Agent Discovery

Start OAuth sign-in

Changed on

Open this URL in the user's browser to start OAuth 2.1 sign-in with PKCE. The user signs in & approves access. Xquik then sends a code to your redirect_uri.

get/api/oauth/authorize

Request

  • Base URL
    https://xquik.com
  • URL
    https://xquik.com/api/oauth/authorize
  • Auth
    none required

Query parameters

response_type'code' required

The only value is code.

client_idstring required

The client_id from registration, or the HTTPS URL of your client metadata document.

redirect_uristring

A registered redirect URI. Leave it out only when the client has exactly 1.

code_challengestring required

Base64url SHA-256 hash of your PKCE code_verifier.

code_challenge_method'S256' required

The only value is S256.

scopestring

Space-separated scopes, mcp:tools or mcp:read. Defaults to mcp:tools.

resourcestring

The resource the token is for. Defaults to the MCP server.

statestring

A value Xquik sends back unchanged with the code.

locale'en' | 'es' | 'ja' | 'ko' | 'tr' | 'zh'

Language of the sign-in & consent pages.

Response

The sign-in or consent page. A missing or unknown client_id, or a redirect_uri the client didn't register, shows an error page instead, since Xquik can't redirect.

Changes