API SpecificationOAuth Clients
Approve MCP Client
Grants a dynamically registered client permission to hold the auth:mcp scope and drive the MCP endpoint, or revokes that permission. Only clients created by dynamic registration can be approved. Approval also pins the client to the MCP scope allowlist.
Required scopes: auth:clients:edit
AuthorizationBearer <token>
JWT access token obtained via OAuth2 flow or service account
In: header
Header Parameters
Connect-Protocol-Version?number
Define the version of the Connect protocol
Connect-Timeout-Ms?number
Define the timeout, in ms
Request Body
application/json
clientId?string
The self-registered client to approve.
Length
1 <= lengthapproved?boolean
false revokes a previously granted approval: the client keeps existing but can no longer hold auth:mcp.
[key: string]?never
Response Body
application/json
application/json
curl -X POST "https://auth.xeonr.io/xeonr.auth.api.v1.ClientsService/ApproveMcpClient" \ -H "Connect-Protocol-Version: 1" \ -H "Connect-Timeout-Ms: 1000" \ -H "Content-Type: application/json" \ -d '{}'{
"client": {
"clientId": "550e8400-e29b-41d4-a716-446655440000",
"clientSecret": "sk_live_a1b2c3d4e5f6g7h8i9j0...",
"name": "My OAuth App",
"redirectUri": "https://myapp.example.com/oauth/callback",
"redirectUris": [
"https://myapp.example.com/oauth/callback"
],
"supportsRefreshToken": true,
"supportsImplicitGrant": true,
"supportsDeviceCodeGrant": true,
"supportsCodeGrant": true,
"supportsClientCredentials": true,
"websiteUrl": "https://myapp.example.com",
"createdAt": "2023-01-15T01:30:15.01Z",
"updatedAt": "2023-01-15T01:30:15.01Z",
"description": "A sample OAuth application for demonstration purposes",
"isVerified": true,
"applicationId": "app_prod_myapp",
"usesManagedBuckets": true,
"applicationBindings": [
{
"applicationId": "app_prod_myapp",
"config": {
"jsonConfig": {
"property1": {},
"property2": {}
}
},
"iacManaged": true
}
],
"allowedDelegators": [
"550e8400-e29b-41d4-a716-446655440001"
],
"logoUrl": "https://cdn.example.com/logos/myapp.png",
"backchannelLogoutUri": "https://myapp.example.com/backchannel-logout",
"backchannelLogoutSessionRequired": true,
"frontchannelLogoutUri": "https://myapp.example.com/frontchannel-logout",
"frontchannelLogoutSessionRequired": true,
"postLogoutRedirectUris": [
"https://myapp.example.com/logged-out"
],
"hasSecret": true,
"iacManaged": true,
"brandProfileId": "string",
"dcrRegistered": true,
"softwareId": "string",
"mcpClient": true
}
}{
"code": "not_found",
"message": "string",
"details": [
{
"type": "string",
"value": "string",
"debug": {}
}
]
}