Show the OAuth authorization page.
GET /oauth/authorize
When a client omits scope for the canonical /mcp resource, the signed-in user chooses read-only, review-and-comment, or a custom set at consent time. Omitted scope for other resources remains read-only.
Access
Section titled “Access”This operation does not declare a credential requirement in the released API contract.
Provider access, workspace membership, and agent grants are enforced separately. A token does not expand access to a repository or resource. Set up developer access.
Parameters
Section titled “Parameters”| Name | Location | Type | Required | Description |
|---|---|---|---|---|
client_id |
query | string | No | |
redirect_uri |
query | string | No | |
response_type |
query | "code" |
No | |
code_challenge |
query | string | No | |
code_challenge_method |
query | "S256" |
No | |
scope |
query | string | No | |
resource |
query | string | No | |
state |
query | string | No |
Call the endpoint
Section titled “Call the endpoint”Replace path placeholders and your credential. For body operations, create request.json using the required fields above; this command does not invent resource identifiers or consent.
curl --request GET \ 'https://commentary.dev/oauth/authorize'Responses
Section titled “Responses”| Status | Meaning | Payload |
|---|---|---|
200 |
HTML authorization page. | See response headers or body contract |
302 |
Redirect to the client with an authorization error. | See response headers or body contract |
Recover from errors
Section titled “Recover from errors”Use the returned status and error body. Correct invalid fields before retrying; reconnect or narrow the target for authentication and permission errors. For conditional writes, reload the latest version before preparing a new request. Respect rate-limit headers and retry only when the operation’s idempotency contract permits it.
Contract and related guidance
Section titled “Contract and related guidance”Operation ID: showOAuthAuthorizePage. Download the OpenAPI contract for complete constraints and code generation. Browse endpoints.