Skip to main content
POST
Start MCP OAuth for a new secret

Authorizations

Authorization
string
header
required

An opaque Omnara personal or organization bearer token.

Path Parameters

orgID
string
required
Pattern: ^org_[a-z2-7]{26}$

Body

application/json
owner
object
required
mcp_url
string
required
Minimum string length: 1
name
string
required

Human-readable name. Spaces and punctuation are allowed; leading or trailing whitespace and invisible or control characters are not.

Required string length: 1 - 64
return_to
string
client_id
string
client_secret
string
scopes
string[]
metadata
object

User-supplied metadata for the stored secret. A restriction of Metadata that leaves room for one reserved pair - Omnara sets mcp_url on the secret to the flow's MCP endpoint URL, so the key is reserved and at most 15 user pairs are accepted.

Response

MCP OAuth flow started.

flow_id
string
required
Pattern: ^moaf_[a-z2-7]{26}$
authorization_url
string<uri>
required
expires_at
string<date-time>
required