OAuth
Get Consent Request
What a signed authorization request asks for: the app, where the browser returns, the scopes, and the signed-in user's workspaces. 400 `invalid_request` for a bad or expired request.
API key access
Not available to API keys or connected apps: only a signed-in person can call this route.
GET
/api/v1/oauth/consentAuthorizationBearer <token>
Access token from /api/v1/auth/login, or an API key (ro_pat_..., RO-176) from /api/v1/workspaces/current/api-keys: the key implies its workspace and needs the route's scope. MCP connectors (/api/v1/mcp only) may use an OAuth access token (ro_oat_..., RO-284).
In: header
Query Parameters
requeststring
The signed request from the consent URL.
Response Body
curl -X GET "http://localhost:8000/api/v1/oauth/consent?request=string"{
"client_id": "string",
"client_name": "string",
"client_uri": "string",
"redirect_uri": "string",
"redirect_host": "string",
"scopes": [
{
"scope": "string",
"description": "string",
"admin_only": true
}
],
"resource": "string",
"workspaces": [
{
"id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
"name": "string",
"role": "owner",
"suspended": true
}
],
"expires_at": "2019-08-24T14:15:22Z"
}Empty
Empty