Skip to main content

MCP server OAuth callback (public)

GET 
/api/mcp/oauth/callback

Where a workspace's MCP authorization server sends the admin's browser (doc 111 K7). Trust is the single-use state parked by startMcpServerOAuth, which also holds the PKCE verifier; iss is checked when the authorization server sends it. On success the grant is stored encrypted and the server's tools are fetched. Always redirects to the panel: /settings?tab=ai-tools&mcp_oauth=connected&mcp_server=<id> or …&mcp_oauth_error=<reason>.

Request​

Responses​

Back to the panel.