find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/appdeploy-ai:appdeploy-ai-oauth-discovery-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: AppDeploy MCP OAuth discovery API
  version: 2.x
  description: Public HTTP and OAuth discovery surface for the AppDeploy Model Context Protocol server. MCP JSON-RPC tool calls are sent to /mcp. The scope required for a tools/call request depends on the selected tool.
  termsOfService: https://appdeploy.ai/terms
  contact:
    name: AppDeploy Support
    email: support@appdeploy.ai
    url: https://appdeploy.ai/mcp-docs
  license:
    name: Proprietary
    url: https://appdeploy.ai/terms
servers:
- url: https://api-v2.appdeploy.ai
  description: Production floating v2 MCP endpoint
tags:
- name: OAuth discovery
  description: RFC 8414 authorization-server metadata and RFC 9728 protected-resource metadata
paths:
  /.well-known/oauth-protected-resource/mcp:
    get:
      tags:
      - OAuth discovery
      operationId: getProtectedResourceMetadata
      summary: Get RFC 9728 protected-resource metadata
      description: Returns the authorization servers, OAuth scopes, and bearer-token delivery methods supported by the production AppDeploy MCP resource. MCP clients use this document to discover how to authenticate and which permission scopes are defined for the resource.
      security: []
      responses:
        '200':
          description: OAuth protected-resource metadata for the MCP endpoint
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ProtectedResourceMetadata'
        '404':
          description: Protected-resource metadata path is not available
  /.well-known/oauth-authorization-server:
    get:
      tags:
      - OAuth discovery
      operationId: getAuthorizationServerMetadata
      summary: Get RFC 8414 authorization-server metadata
      description: Returns the OAuth authorization, token, and dynamic client registration endpoints, plus the supported grants, PKCE methods, and scopes for AppDeploy MCP authentication.
      security: []
      responses:
        '200':
          description: OAuth authorization-server metadata
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServerMetadata'
        '404':
          description: Authorization-server metadata path is not available
components:
  schemas:
    ProtectedResourceMetadata:
      type: object
      required:
      - resource
      properties:
        resource:
          type: string
          format: uri
          const: https://api-v2.appdeploy.ai/mcp
        authorization_servers:
          type: array
          items:
            type: string
            format: uri
        scopes_supported:
          type: array
          items:
            enum:
            - deploy:read
            - deploy:write
            - deploy:delete
        bearer_methods_supported:
          type: array
          items:
            enum:
            - header
    AuthorizationServerMetadata:
      type: object
      required:
      - issuer
      - authorization_endpoint
      - token_endpoint
      properties:
        issuer:
          type: string
          format: uri
        authorization_endpoint:
          type: string
          format: uri
        token_endpoint:
          type: string
          format: uri
        registration_endpoint:
          type: string
          format: uri
        response_types_supported:
          type: array
          items:
            type: string
        grant_types_supported:
          type: array
          items:
            type: string
        code_challenge_methods_supported:
          type: array
          items:
            type: string
        scopes_supported:
          type: array
          items:
            enum:
            - deploy:read
            - deploy:write
            - deploy:delete
  securitySchemes:
    AppDeployOAuth:
      type: oauth2
      description: OAuth 2.0 Authorization Code flow with PKCE and dynamic client registration. AppDeploy declares separate tool permission scopes for read, write, and delete operations.
      flows:
        authorizationCode:
          authorizationUrl: https://api-v2.appdeploy.ai/mcp/authorize
          tokenUrl: https://api-v2.appdeploy.ai/mcp/token
          scopes:
            deploy:read: Read deployment instructions and SDK reference; list and inspect apps, deployment status, versions, logs, and source.
            deploy:write: Create or update app deployments, apply versions, and change app configuration.
            deploy:delete: Delete an app. Intended only for an explicit destructive delete operation.
    AppDeployBearerToken:
      type: http
      scheme: bearer
      description: Bearer access token issued by AppDeploy OAuth or an AppDeploy API key for clients that cannot complete OAuth. OAuth is preferred because it declares scopes.
externalDocs:
  description: AppDeploy MCP documentation
  url: https://appdeploy.ai/mcp-docs