GET /v1/oauth/authorize
GET /v1/oauth/authorize
GET
/v1/oauth/authorize
Entry point for the authorization_code grant. Validates params and either redirects to consent (if the user already has a session) or to login first.
Parameters
Section titled “ Parameters ”Query Parameters
Section titled “Query Parameters ” client_id
required
string
redirect_uri
required
string
response_type
required
string
code_challenge
required
string
code_challenge_method
required
string
scope
string | null
state
string | null
resource
string | null
RFC 8707 resource indicator. MCP clients pass their MCP URL here.
nonce
string | null
OIDC nonce — preserved end-to-end so clients can verify.
Responses
Section titled “ Responses ”Redirect to consent or login
Invalid request