Skip to main content

Authorisation request (RFC 6749 authorization endpoint)

GET 
/v1/mcp/oauth/authorize

Browser entry point for the OAuth 2.0 authorization-code flow. Validates client + redirect_uri + PKCE, creates a consent session, then 302-redirects the browser to the SPA consent screen. If the user has no active session cookie, 302-redirects to /login?next=... instead - the same handler reruns after sign-in.

Request​

Responses​

Redirect to the SPA login page when no session cookie is present, or to the OAuth consent screen after validation.

Response Headers
    Location

    Absolute URL to continue the authorization flow.