Skip to main content
GET
Get an OAuth sign-in

Authorizations

Authorization
string
header
required

An org API key (gh_live_…) from Settings → API keys in the console.

Path Parameters

secret_id
string
required

Response

OK

An OAuth sign-in for an MCP server: its state, never its tokens.

object
enum<string>
Available options:
mcp_oauth
secret_id
string

Put it in the server's auth ({ "secret_id": … }) to use this sign-in.

Example:

"tsec_8Zp2kQ7wLm4x"

url
string<uri>

The MCP server it's for. It's only ever sent to this address's origin.

status
enum<string>

pending: not connected yet. connected: the agent can call the server. expired: the provider wouldn't renew it; reconnect it.

Available options:
pending,
connected,
expired
pending
boolean

A sign-in started (or a reconnect) waits for the person to finish it.

scope
string | null

The scopes it was granted (or asked for).

connected_at
string<date-time> | null
error
string | null

Why the last attempt didn't connect, or why it expired.

authorize_url
string<uri>

Start only: the provider's sign-in page, to open in a popup for the person.