Skip to main content
POST
Exchange or refresh an MCP OAuth token

Body

application/x-www-form-urlencoded
grant_type
any
required
client_id
string
required
resource
string<uri>
required
code
string
required
redirect_uri
string<uri>
required
code_verifier
string
required

Response

Resource-bound bearer token

access_token
string
required
token_type
string
required
Allowed value: "Bearer"
expires_in
integer
required
Required range: x >= 1
scope
string
required
resource
string<uri>
required
refresh_token
string

Present when offline_access was granted; rotated on every refresh.