Create or deny an MCP OAuth authorization response

POST/mcp/oauth/authorize

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

approved*boolean

Whether the user approved the MCP OAuth request

client_id*string

OAuth client ID or client metadata URL

code_challenge?string

PKCE S256 code challenge. Required when approved is true.

code_challenge_method?string

PKCE method. Must be S256 when approved is true.

redirect_uri*string

OAuth redirect URI

resource?string

MCP protected resource URL

response_type*string

OAuth response type. Must be code.

scope?string

Requested OAuth scope. Supported values are mcp:read and mcp:full. Defaults to mcp:full.

state?string

Opaque client state to echo to the redirect URI

workspace_id?string

Optional workspace ID the resulting MCP token is limited to

Response Body

`application/json`

`application/problem+json`

curl -X POST "https://example.com/mcp/oauth/authorize" \  -H "Content-Type: application/json" \  -d '{    "approved": true,    "client_id": "string",    "redirect_uri": "string",    "response_type": "string"  }'

{  "$schema": "https://example.com/api/v1/schemas/CreateMCPOAuthAuthorizationOutputBody.json",  "redirect_url": "string"}

Create or deny an MCP OAuth authorization response

Authorization

Request Body

Response Body

200application/json

400application/problem+json

401application/problem+json

403application/problem+json

422application/problem+json

500application/problem+json

`application/json`

`application/problem+json`

`application/problem+json`

`application/problem+json`

`application/problem+json`

`application/problem+json`