Exchange Token
POST/v1/mcp/oauth/token
OAuth 2.0 token endpoint (RFC 6749).
Grants supported: authorization_code, refresh_token, and
client_credentials. The client_credentials grant accepts client
authentication via HTTP Basic or client_secret_post form fields.
Body content-type: application/x-www-form-urlencoded (per RFC 6749,
default for every standard OAuth client library) OR
application/json (convenience for callers without a form-encoder).
Request
Responses
- 200
- 400
- 401
- 403
- 409
- 422
Successful Response
Malformed request. error.code: BAD_REQUEST.
Authentication required. error.code: AUTHENTICATION_REQUIRED.
Permission denied
Invalid state for this operation (also error.code: INVALID_STATE, CONFLICT).
Validation error