Sign in

v9

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-01391555.5 KB
MCP OAuth

Exchange an authorization code or refresh token.

Supports authorization_code with PKCE S256 and refresh_token with rotation.

post/mcp/oauth/token

Request body

OR

Response

MCP OAuth token response.

access_tokenstring required

Short-lived JWT for /api/v1/mcp.

token_type'Bearer' required
expires_ininteger required
refresh_tokenstring required

Opaque refresh token. Store securely; traxy stores only a hash.

scopestring required

Example response

{
  "expires_in": 900,
  "scope": "workspace:read leads:read analytics:read agent:read"
}