Start authorizing an OAuth MCP server (AI manager only)

POST 
/api/ai/mcp-servers/:mcpConnection/oauth/start

For a server whose auth_scheme is oauth (doc 111 K7). Discovers the server's authorization server (protected-resource metadata, RFC 9728; server metadata, RFC 8414), finds the client ConnectWiz is known by (the client id entered by hand, a client metadata document, or dynamic registration) and answers the URL the admin's browser opens. PKCE (S256) and resource are always sent; a server without S256 is refused. The authorization server sends the browser back to GET /api/mcp/oauth/callback. 422 with the reason, in the admin's language, when the server cannot be authorized. Throttled.

Request

Responses

200

The authorize URL to open in the browser.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

403

Authenticated but not allowed.

404

Resource not found (or not visible to the current tenant).

422

The request failed validation.