REST APIReference
OAuth 2.1
Authorization-server metadata, dynamic client registration, token and revocation endpoints used by MCP clients.
Generated from the Atrix Analytics — control plane API OpenAPI document, version 0.1.0. 5 operations. The raw document is at /openapi.json.
GET /.well-known/oauth-authorization-server
RFC 8414 authorization server metadata.
Auth: none.
| Status | Body | Notes |
|---|---|---|
| 200 | — | RFC 8414 metadata |
GET /.well-known/oauth-protected-resource/v1
RFC 9728 protected-resource metadata for the /v1 API.
Auth: none.
| Status | Body | Notes |
|---|---|---|
| 200 | — | RFC 9728 metadata |
POST /oauth/register
RFC 7591 dynamic client registration. Public clients (PKCE, no secret) only.
Auth: none.
Request body (application/json): RegisterRequest
| Field | Type | Required | Description |
|---|---|---|---|
client_name | string | null | ||
client_uri | string | null | ||
grant_types | string[] | null | ||
logo_uri | string | null | ||
policy_uri | string | null | ||
redirect_uris | string[] | yes | |
response_types | string[] | null | ||
scope | string | null | ||
software_id | string | null | ||
software_version | string | null | ||
token_endpoint_auth_method | string | null | ||
tos_uri | string | null |
| Status | Body | Notes |
|---|---|---|
| 201 | RegisterResponse | |
| 400 | — | RFC 7591 error |
POST /oauth/revoke
RFC 7009 revocation. Always 200 for a well-formed request.
Auth: none.
| Status | Body | Notes |
|---|---|---|
| 200 | — | Revoked (or never existed) |
POST /oauth/token
Auth: none.
Request body (application/json): TokenForm
| Field | Type | Required | Description |
|---|---|---|---|
client_id | string | null | ||
code | string | null | ||
code_verifier | string | null | ||
grant_type | string | yes | authorization_code or refresh_token. |
redirect_uri | string | null | ||
refresh_token | string | null | ||
resource | string | null | ||
scope | string | null |
| Status | Body | Notes |
|---|---|---|
| 200 | TokenResponse | |
| 400 | — | RFC 6749 §5.2 error |