Depot portalmcp

View as Markdown Open in ChatGPT Open in Claude

Registers the portal’s OAuth server and /portal/mcp on the portal mux.

This page is generated from the Depot route table. Every operation carries the permission it needs and the anchor an agent can link to.

GET `/.well-known/oauth-authorization-server/portal`

GETNo permission neededportal facemspIdempotent

Source: [object Object]

As metadata

Responses

Status	Body	Description
`200`	`application/json`, object	Success.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X GET 'https://depot.example.com/.well-known/oauth-authorization-server/portal' \
  -H 'Accept: application/json'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$headers = @{
    'Accept' = 'application/json'
}

$response = Invoke-RestMethod `
    -Method Get `
    -Uri 'https://depot.example.com/.well-known/oauth-authorization-server/portal' `
    -Headers $headers

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/.well-known/oauth-authorization-server/portal"
headers = {
    "Accept": "application/json",
}

response = requests.get(url, headers=headers, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodGet, "https://depot.example.com/.well-known/oauth-authorization-server/portal", nil)
  if err != nil {
    log.Fatal(err)
  }

  req.Header.Set("Accept", "application/json")

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/.well-known/oauth-authorization-server/portal";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "Accept": "application/json",
  },
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://depot.example.com/.well-known/oauth-authorization-server/portal");
request.Headers.TryAddWithoutValidation("Accept", "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

OPTIONS `/.well-known/oauth-authorization-server/portal`

OPTIONSNo permission neededportal facemspIdempotent

Source: [object Object]

Oauth preflight

Responses

Status	Body	Description
`204`	None	Success, with no body.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X OPTIONS 'https://depot.example.com/.well-known/oauth-authorization-server/portal'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Options `
    -Uri 'https://depot.example.com/.well-known/oauth-authorization-server/portal'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/.well-known/oauth-authorization-server/portal"

response = requests.options(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodOptions, "https://depot.example.com/.well-known/oauth-authorization-server/portal", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/.well-known/oauth-authorization-server/portal";

const response = await fetch(url, {
  method: "OPTIONS",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Options, "https://depot.example.com/.well-known/oauth-authorization-server/portal");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

GET `/.well-known/oauth-protected-resource/portal/mcp`

GETNo permission neededportal facemspIdempotent

Source: [object Object]

Resource metadata

Responses

Status	Body	Description
`200`	`application/json`, object	Success.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X GET 'https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp' \
  -H 'Accept: application/json'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$headers = @{
    'Accept' = 'application/json'
}

$response = Invoke-RestMethod `
    -Method Get `
    -Uri 'https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp' `
    -Headers $headers

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp"
headers = {
    "Accept": "application/json",
}

response = requests.get(url, headers=headers, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodGet, "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp", nil)
  if err != nil {
    log.Fatal(err)
  }

  req.Header.Set("Accept", "application/json")

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "Accept": "application/json",
  },
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp");
request.Headers.TryAddWithoutValidation("Accept", "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

OPTIONS `/.well-known/oauth-protected-resource/portal/mcp`

OPTIONSNo permission neededportal facemspIdempotent

Source: [object Object]

Oauth preflight

Responses

Status	Body	Description
`204`	None	Success, with no body.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X OPTIONS 'https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Options `
    -Uri 'https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp"

response = requests.options(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodOptions, "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp";

const response = await fetch(url, {
  method: "OPTIONS",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Options, "https://depot.example.com/.well-known/oauth-protected-resource/portal/mcp");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

GET `/portal/.well-known/oauth-authorization-server`

GETNo permission neededportal facemspIdempotent

Source: [object Object]

As metadata

Responses

Status	Body	Description
`200`	`application/json`, object	Success.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X GET 'https://depot.example.com/portal/.well-known/oauth-authorization-server' \
  -H 'Accept: application/json'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$headers = @{
    'Accept' = 'application/json'
}

$response = Invoke-RestMethod `
    -Method Get `
    -Uri 'https://depot.example.com/portal/.well-known/oauth-authorization-server' `
    -Headers $headers

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/.well-known/oauth-authorization-server"
headers = {
    "Accept": "application/json",
}

response = requests.get(url, headers=headers, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodGet, "https://depot.example.com/portal/.well-known/oauth-authorization-server", nil)
  if err != nil {
    log.Fatal(err)
  }

  req.Header.Set("Accept", "application/json")

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/.well-known/oauth-authorization-server";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "Accept": "application/json",
  },
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://depot.example.com/portal/.well-known/oauth-authorization-server");
request.Headers.TryAddWithoutValidation("Accept", "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

OPTIONS `/portal/.well-known/oauth-authorization-server`

OPTIONSNo permission neededportal facemspIdempotent

Source: [object Object]

Oauth preflight

Responses

Status	Body	Description
`204`	None	Success, with no body.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X OPTIONS 'https://depot.example.com/portal/.well-known/oauth-authorization-server'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Options `
    -Uri 'https://depot.example.com/portal/.well-known/oauth-authorization-server'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/.well-known/oauth-authorization-server"

response = requests.options(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodOptions, "https://depot.example.com/portal/.well-known/oauth-authorization-server", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/.well-known/oauth-authorization-server";

const response = await fetch(url, {
  method: "OPTIONS",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Options, "https://depot.example.com/portal/.well-known/oauth-authorization-server");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

GET `/portal/mcp`

GETNo permission neededportal facemspIdempotentNot fully resolved

What this page does not know

handler
response

These are parts of the route the extractor could not read from the source. Everything else on this page came straight from it.

Source: [object Object]

GET /portal/mcp

Responses

Status	Body	Description
`200`	None	Success. The body shape was not resolved; see x-outpost-unresolved.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X GET 'https://depot.example.com/portal/mcp'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Get `
    -Uri 'https://depot.example.com/portal/mcp'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/mcp"

response = requests.get(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodGet, "https://depot.example.com/portal/mcp", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/mcp";

const response = await fetch(url, {
  method: "GET",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://depot.example.com/portal/mcp");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

POST `/portal/mcp`

POSTNo permission neededportal facemspNot fully resolved

What this page does not know

handler
response

These are parts of the route the extractor could not read from the source. Everything else on this page came straight from it.

Source: [object Object]

POST /portal/mcp

Responses

Status	Body	Description
`200`	None	Success. The body shape was not resolved; see x-outpost-unresolved.

Request samples

# This operation is public. It takes no credentials.
curl -X POST 'https://depot.example.com/portal/mcp'

# This operation is public. It takes no credentials.

$response = Invoke-RestMethod `
    -Method Post `
    -Uri 'https://depot.example.com/portal/mcp'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.

import requests

url = "https://depot.example.com/portal/mcp"

response = requests.post(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodPost, "https://depot.example.com/portal/mcp", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.

const url = "https://depot.example.com/portal/mcp";

const response = await fetch(url, {
  method: "POST",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://depot.example.com/portal/mcp");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

DELETE `/portal/mcp`

DELETENo permission neededportal facemspIdempotentNot fully resolved

What this page does not know

handler
response

These are parts of the route the extractor could not read from the source. Everything else on this page came straight from it.

Source: [object Object]

DELETE /portal/mcp

Responses

Status	Body	Description
`200`	None	Success. The body shape was not resolved; see x-outpost-unresolved.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X DELETE 'https://depot.example.com/portal/mcp'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Delete `
    -Uri 'https://depot.example.com/portal/mcp'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/mcp"

response = requests.delete(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodDelete, "https://depot.example.com/portal/mcp", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/mcp";

const response = await fetch(url, {
  method: "DELETE",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Delete, "https://depot.example.com/portal/mcp");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

OPTIONS `/portal/mcp`

OPTIONSNo permission neededportal facemspIdempotent

Source: [object Object]

mcpPreflight answers a browser client’s CORS preflight, which carries no credentials (the bearer branch lets it through).

Any origin, never credentials; 404 off the canonical Host like the route itself.

Responses

Status	Body	Description
`204`	None	Success, with no body.
`404`	`application/problem+json`, ProblemDetails	No resource matches.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X OPTIONS 'https://depot.example.com/portal/mcp' \
  -H 'Accept: application/json'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$headers = @{
    'Accept' = 'application/json'
}

$response = Invoke-RestMethod `
    -Method Options `
    -Uri 'https://depot.example.com/portal/mcp' `
    -Headers $headers

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/mcp"
headers = {
    "Accept": "application/json",
}

response = requests.options(url, headers=headers, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodOptions, "https://depot.example.com/portal/mcp", nil)
  if err != nil {
    log.Fatal(err)
  }

  req.Header.Set("Accept", "application/json")

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/mcp";

const response = await fetch(url, {
  method: "OPTIONS",
  headers: {
    "Accept": "application/json",
  },
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Options, "https://depot.example.com/portal/mcp");
request.Headers.TryAddWithoutValidation("Accept", "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

GET `/portal/oauth/authorize`

GETNo permission neededportal facemspIdempotentNot fully resolved

What this page does not know

response

These are parts of the route the extractor could not read from the source. Everything else on this page came straight from it.

Source: [object Object]

authorize validates the client and its redirect URI before anything can be a redirect, as the console’s does (oauth.go), then hands the request to the consent page.

Parameters

Name	In	Type	Required
`client_id`	query	string	No
`code_challenge`	query	string	No
`code_challenge_method`	query	string	No
`redirect_uri`	query	string	No
`resource`	query	string	No
`response_type`	query	string	No
`scope`	query	string	No
`state`	query	string	No

Responses

Status	Body	Description
`200`	None	Success. The body shape was not resolved; see x-outpost-unresolved.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X GET 'https://depot.example.com/portal/oauth/authorize?client_id=<client_id>&code_challenge=<code_challenge>&code_challenge_method=<code_challenge_method>&redirect_uri=<redirect_uri>&resource=<resource>&response_type=<response_type>'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Get `
    -Uri 'https://depot.example.com/portal/oauth/authorize?client_id=<client_id>&code_challenge=<code_challenge>&code_challenge_method=<code_challenge_method>&redirect_uri=<redirect_uri>&resource=<resource>&response_type=<response_type>'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/oauth/authorize"
params = {
    "client_id": "<client_id>",
    "code_challenge": "<code_challenge>",
    "code_challenge_method": "<code_challenge_method>",
    "redirect_uri": "<redirect_uri>",
    "resource": "<resource>",
    "response_type": "<response_type>",
}

response = requests.get(url, params=params, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodGet, "https://depot.example.com/portal/oauth/authorize?client_id=<client_id>&code_challenge=<code_challenge>&code_challenge_method=<code_challenge_method>&redirect_uri=<redirect_uri>&resource=<resource>&response_type=<response_type>", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = new URL("https://depot.example.com/portal/oauth/authorize");
url.searchParams.set("client_id", "<client_id>");
url.searchParams.set("code_challenge", "<code_challenge>");
url.searchParams.set("code_challenge_method", "<code_challenge_method>");
url.searchParams.set("redirect_uri", "<redirect_uri>");
url.searchParams.set("resource", "<resource>");
url.searchParams.set("response_type", "<response_type>");

const response = await fetch(url, {
  method: "GET",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://depot.example.com/portal/oauth/authorize?client_id=<client_id>&code_challenge=<code_challenge>&code_challenge_method=<code_challenge_method>&redirect_uri=<redirect_uri>&resource=<resource>&response_type=<response_type>");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

POST `/portal/oauth/register`

POSTNo permission neededportal facemspNot fully resolved

What this page does not know

response-status

These are parts of the route the extractor could not read from the source. Everything else on this page came straight from it.

Source: [object Object]

Register

Request body

Required, sent as application/json.

Field	Type	Description
`client_name`required	`string`
`grant_types`required	`array of string`
`redirect_uris`required	`array of string`
`response_types`required	`array of string`
`software_id`required	`string`
`software_version`required	`string`
`token_endpoint_auth_method`required	`string`

Responses

Status	Body	Description
`200`	`application/json`, object	Success.
`201`	`application/json`, object	Created.
`400`	`application/problem+json`, ProblemDetails	The request body is not acceptable.

Request samples

# This operation is public. It takes no credentials.
curl -X POST 'https://depot.example.com/portal/oauth/register' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  --data '{
  "client_name": "string",
  "grant_types": [
    "string"
  ],
  "redirect_uris": [
    "string"
  ],
  "response_types": [
    "string"
  ],
  "software_id": "string",
  "software_version": "string",
  "token_endpoint_auth_method": "string"
}'

# This operation is public. It takes no credentials.

$headers = @{
    'Accept' = 'application/json'
    'Content-Type' = 'application/json'
}

$body = @'
{
  "client_name": "string",
  "grant_types": [
    "string"
  ],
  "redirect_uris": [
    "string"
  ],
  "response_types": [
    "string"
  ],
  "software_id": "string",
  "software_version": "string",
  "token_endpoint_auth_method": "string"
}
'@

$response = Invoke-RestMethod `
    -Method Post `
    -Uri 'https://depot.example.com/portal/oauth/register' `
    -Headers $headers `
    -ContentType 'application/json' `
    -Body $body

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.

import requests

url = "https://depot.example.com/portal/oauth/register"
headers = {
    "Accept": "application/json",
    "Content-Type": "application/json",
}
payload = {
    "client_name": "string",
    "grant_types": [
        "string",
    ],
    "redirect_uris": [
        "string",
    ],
    "response_types": [
        "string",
    ],
    "software_id": "string",
    "software_version": "string",
    "token_endpoint_auth_method": "string",
}

response = requests.post(url, headers=headers, json=payload, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
package main

import (
  "bytes"
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  body := []byte(`{
  "client_name": "string",
  "grant_types": [
    "string"
  ],
  "redirect_uris": [
    "string"
  ],
  "response_types": [
    "string"
  ],
  "software_id": "string",
  "software_version": "string",
  "token_endpoint_auth_method": "string"
}`)

  req, err := http.NewRequest(http.MethodPost, "https://depot.example.com/portal/oauth/register", bytes.NewReader(body))
  if err != nil {
    log.Fatal(err)
  }

  req.Header.Set("Accept", "application/json")
  req.Header.Set("Content-Type", "application/json")

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.

const url = "https://depot.example.com/portal/oauth/register";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "Accept": "application/json",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "client_name": "string",
    "grant_types": [
      "string"
    ],
    "redirect_uris": [
      "string"
    ],
    "response_types": [
      "string"
    ],
    "software_id": "string",
    "software_version": "string",
    "token_endpoint_auth_method": "string"
  }),
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

const string body = """
{
  "client_name": "string",
  "grant_types": [
    "string"
  ],
  "redirect_uris": [
    "string"
  ],
  "response_types": [
    "string"
  ],
  "software_id": "string",
  "software_version": "string",
  "token_endpoint_auth_method": "string"
}
""";

var request = new HttpRequestMessage(HttpMethod.Post, "https://depot.example.com/portal/oauth/register");
request.Headers.TryAddWithoutValidation("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

OPTIONS `/portal/oauth/register`

OPTIONSNo permission neededportal facemspIdempotent

Source: [object Object]

Oauth preflight

Responses

Status	Body	Description
`204`	None	Success, with no body.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X OPTIONS 'https://depot.example.com/portal/oauth/register'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Options `
    -Uri 'https://depot.example.com/portal/oauth/register'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/oauth/register"

response = requests.options(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodOptions, "https://depot.example.com/portal/oauth/register", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/oauth/register";

const response = await fetch(url, {
  method: "OPTIONS",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Options, "https://depot.example.com/portal/oauth/register");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

POST `/portal/oauth/revoke`

POSTNo permission neededportal facemspNot fully resolved

What this page does not know

response-status

These are parts of the route the extractor could not read from the source. Everything else on this page came straight from it.

Source: [object Object]

Revoke

Parameters

Name	In	Type	Required
`client_id`	query	string	No
`client_secret`	query	string	No
`token`	query	string	No

Responses

Status	Body	Description
`200`	`application/json`, object	Success.

Request samples

# This operation is public. It takes no credentials.
curl -X POST 'https://depot.example.com/portal/oauth/revoke?client_id=<client_id>&client_secret=<client_secret>&token=<token>' \
  -H 'Accept: application/json'

# This operation is public. It takes no credentials.

$headers = @{
    'Accept' = 'application/json'
}

$response = Invoke-RestMethod `
    -Method Post `
    -Uri 'https://depot.example.com/portal/oauth/revoke?client_id=<client_id>&client_secret=<client_secret>&token=<token>' `
    -Headers $headers

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.

import requests

url = "https://depot.example.com/portal/oauth/revoke"
params = {
    "client_id": "<client_id>",
    "client_secret": "<client_secret>",
    "token": "<token>",
}
headers = {
    "Accept": "application/json",
}

response = requests.post(url, params=params, headers=headers, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodPost, "https://depot.example.com/portal/oauth/revoke?client_id=<client_id>&client_secret=<client_secret>&token=<token>", nil)
  if err != nil {
    log.Fatal(err)
  }

  req.Header.Set("Accept", "application/json")

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.

const url = new URL("https://depot.example.com/portal/oauth/revoke");
url.searchParams.set("client_id", "<client_id>");
url.searchParams.set("client_secret", "<client_secret>");
url.searchParams.set("token", "<token>");

const response = await fetch(url, {
  method: "POST",
  headers: {
    "Accept": "application/json",
  },
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://depot.example.com/portal/oauth/revoke?client_id=<client_id>&client_secret=<client_secret>&token=<token>");
request.Headers.TryAddWithoutValidation("Accept", "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

OPTIONS `/portal/oauth/revoke`

OPTIONSNo permission neededportal facemspIdempotent

Source: [object Object]

Oauth preflight

Responses

Status	Body	Description
`204`	None	Success, with no body.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X OPTIONS 'https://depot.example.com/portal/oauth/revoke'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Options `
    -Uri 'https://depot.example.com/portal/oauth/revoke'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/oauth/revoke"

response = requests.options(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodOptions, "https://depot.example.com/portal/oauth/revoke", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/oauth/revoke";

const response = await fetch(url, {
  method: "OPTIONS",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Options, "https://depot.example.com/portal/oauth/revoke");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

POST `/portal/oauth/token`

POSTNo permission neededportal facemspNot fully resolved

What this page does not know

response-status

These are parts of the route the extractor could not read from the source. Everything else on this page came straight from it.

Source: [object Object]

Token

Parameters

Name	In	Type	Required
`client_id`	query	string	No
`client_secret`	query	string	No
`code`	query	string	No
`code_verifier`	query	string	No
`grant_type`	query	string	No
`redirect_uri`	query	string	No
`refresh_token`	query	string	No

Responses

Status	Body	Description
`200`	`application/json`, object	Success.

Request samples

# This operation is public. It takes no credentials.
curl -X POST 'https://depot.example.com/portal/oauth/token?client_id=<client_id>&client_secret=<client_secret>&code=<code>&code_verifier=<code_verifier>&grant_type=<grant_type>&redirect_uri=<redirect_uri>' \
  -H 'Accept: application/json'

# This operation is public. It takes no credentials.

$headers = @{
    'Accept' = 'application/json'
}

$response = Invoke-RestMethod `
    -Method Post `
    -Uri 'https://depot.example.com/portal/oauth/token?client_id=<client_id>&client_secret=<client_secret>&code=<code>&code_verifier=<code_verifier>&grant_type=<grant_type>&redirect_uri=<redirect_uri>' `
    -Headers $headers

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.

import requests

url = "https://depot.example.com/portal/oauth/token"
params = {
    "client_id": "<client_id>",
    "client_secret": "<client_secret>",
    "code": "<code>",
    "code_verifier": "<code_verifier>",
    "grant_type": "<grant_type>",
    "redirect_uri": "<redirect_uri>",
}
headers = {
    "Accept": "application/json",
}

response = requests.post(url, params=params, headers=headers, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodPost, "https://depot.example.com/portal/oauth/token?client_id=<client_id>&client_secret=<client_secret>&code=<code>&code_verifier=<code_verifier>&grant_type=<grant_type>&redirect_uri=<redirect_uri>", nil)
  if err != nil {
    log.Fatal(err)
  }

  req.Header.Set("Accept", "application/json")

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.

const url = new URL("https://depot.example.com/portal/oauth/token");
url.searchParams.set("client_id", "<client_id>");
url.searchParams.set("client_secret", "<client_secret>");
url.searchParams.set("code", "<code>");
url.searchParams.set("code_verifier", "<code_verifier>");
url.searchParams.set("grant_type", "<grant_type>");
url.searchParams.set("redirect_uri", "<redirect_uri>");

const response = await fetch(url, {
  method: "POST",
  headers: {
    "Accept": "application/json",
  },
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://depot.example.com/portal/oauth/token?client_id=<client_id>&client_secret=<client_secret>&code=<code>&code_verifier=<code_verifier>&grant_type=<grant_type>&redirect_uri=<redirect_uri>");
request.Headers.TryAddWithoutValidation("Accept", "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

OPTIONS `/portal/oauth/token`

OPTIONSNo permission neededportal facemspIdempotent

Source: [object Object]

Oauth preflight

Responses

Status	Body	Description
`204`	None	Success, with no body.

Request samples

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.
curl -X OPTIONS 'https://depot.example.com/portal/oauth/token'

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

$response = Invoke-RestMethod `
    -Method Options `
    -Uri 'https://depot.example.com/portal/oauth/token'

$response | ConvertTo-Json -Depth 10

# This operation is public. It takes no credentials.
# This operation is idempotent. Repeating it does not repeat its effect.

import requests

url = "https://depot.example.com/portal/oauth/token"

response = requests.options(url, timeout=30)
response.raise_for_status()
print(response.json())

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.
package main

import (
  "fmt"
  "io"
  "log"
  "net/http"
)

func main() {
  req, err := http.NewRequest(http.MethodOptions, "https://depot.example.com/portal/oauth/token", nil)
  if err != nil {
    log.Fatal(err)
  }

  resp, err := http.DefaultClient.Do(req)
  if err != nil {
    log.Fatal(err)
  }
  defer resp.Body.Close()

  out, err := io.ReadAll(resp.Body)
  if err != nil {
    log.Fatal(err)
  }
  fmt.Println(resp.Status, string(out))
}

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

const url = "https://depot.example.com/portal/oauth/token";

const response = await fetch(url, {
  method: "OPTIONS",
});

if (!response.ok) {
  throw new Error(`Request failed with status ${response.status}`);
}

const data = await response.json();
console.log(data);

// This operation is public. It takes no credentials.
// This operation is idempotent. Repeating it does not repeat its effect.

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Options, "https://depot.example.com/portal/oauth/token");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());

Content is licensed CC BY 4.0. Code samples are MIT. Outpost and the Outpost mark are trademarks of Outpost Business Solutions, PBC and are not covered by either license.

Depot portalmcp

GET /.well-known/oauth-authorization-server/portal

Responses

Request samples

OPTIONS /.well-known/oauth-authorization-server/portal

Responses

Request samples

GET /.well-known/oauth-protected-resource/portal/mcp

Responses

Request samples

OPTIONS /.well-known/oauth-protected-resource/portal/mcp

Responses

Request samples

GET /portal/.well-known/oauth-authorization-server

Responses

Request samples

OPTIONS /portal/.well-known/oauth-authorization-server

Responses

Request samples

GET /portal/mcp

Responses

Request samples

POST /portal/mcp

Responses

Request samples

DELETE /portal/mcp

Responses

Request samples

OPTIONS /portal/mcp

Responses

Request samples

GET /portal/oauth/authorize

Parameters

Responses

Request samples

POST /portal/oauth/register

Request body

Responses

Request samples

OPTIONS /portal/oauth/register

Responses

Request samples

POST /portal/oauth/revoke

Parameters

Responses

Request samples

OPTIONS /portal/oauth/revoke

Responses

Request samples

POST /portal/oauth/token

Parameters

Responses

Request samples

OPTIONS /portal/oauth/token

Responses

Request samples

GET `/.well-known/oauth-authorization-server/portal`

OPTIONS `/.well-known/oauth-authorization-server/portal`

GET `/.well-known/oauth-protected-resource/portal/mcp`

OPTIONS `/.well-known/oauth-protected-resource/portal/mcp`

GET `/portal/.well-known/oauth-authorization-server`

OPTIONS `/portal/.well-known/oauth-authorization-server`

GET `/portal/mcp`

POST `/portal/mcp`

DELETE `/portal/mcp`

OPTIONS `/portal/mcp`

GET `/portal/oauth/authorize`

POST `/portal/oauth/register`

OPTIONS `/portal/oauth/register`

POST `/portal/oauth/revoke`

OPTIONS `/portal/oauth/revoke`

POST `/portal/oauth/token`

OPTIONS `/portal/oauth/token`