Begin the authorization code flow

GET

/v1/oauth/authorize

const url = 'https://api.adversarial.com/api/v1/oauth/authorize?client_id=example&redirect_uri=example&response_type=example&code_challenge=example&code_challenge_method=example';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://api.adversarial.com/api/v1/oauth/authorize?client_id=example&redirect_uri=example&response_type=example&code_challenge=example&code_challenge_method=example'

Entry point for the authorization_code grant. Validates params and either redirects to consent (if the user already has a session) or to login first.

Parameters

Query Parameters

client_id

required

string

redirect_uri

required

string

response_type

required

string

code_challenge

required

string

code_challenge_method

required

string

scope

string | null

state

string | null

resource

string | null

RFC 8707 resource indicator. MCP clients pass their MCP URL here.

nonce

string | null

OIDC nonce — preserved end-to-end so clients can verify.

Responses

303

Redirect to consent, onboarding (orgless session), or login

400

Invalid request