Fluxito OAuth API

The Oauth API from Fluxito — 10 operation(s) for oauth.

GitHub OpenAPI

Operations 10

POST /oauth/register Register Client #
GET /oauth/authorize Authorize #
POST /oauth/authorize/decision Authorize Decision #
GET /oauth/authorize/resume/{continue_token} Resume Mcp Authorize #
POST /oauth/token Token #
POST /oauth/device_authorization Device Authorization #
GET /oauth/device Device Page #
POST /oauth/device/decision Device Decision #
GET /oauth/userinfo Userinfo #
POST /oauth/revoke Revoke #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/fluxito-app:fluxito-app-oauth-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

fluxito-app-oauth-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Fluxito Platform OAuth API
  version: 3.0.120
tags:
- name: OAuth
paths:
  /oauth/register:
    post:
      summary: Register Client
      description: 'RFC 7591 Dynamic Client Registration endpoint.

        Claude calls this to provision a client_id before starting the OAuth flow.'
      operationId: register_client_oauth_register_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      tags:
      - OAuth
  /oauth/authorize:
    get:
      summary: Authorize
      description: 'Step 2 of MCP OAuth flow.

        Stores OAuth params in Redis, then redirects user to Google identity login.'
      operationId: authorize_oauth_authorize_get
      parameters:
      - name: response_type
        in: query
        required: true
        schema:
          type: string
          title: Response Type
      - name: client_id
        in: query
        required: true
        schema:
          type: string
          title: Client Id
      - name: redirect_uri
        in: query
        required: true
        schema:
          type: string
          title: Redirect Uri
      - name: scope
        in: query
        required: false
        schema:
          type: string
          default: read
          title: Scope
      - name: state
        in: query
        required: true
        schema:
          type: string
          title: State
      - name: code_challenge
        in: query
        required: true
        schema:
          type: string
          title: Code Challenge
      - name: code_challenge_method
        in: query
        required: false
        schema:
          type: string
          default: S256
          title: Code Challenge Method
      - name: resource
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Resource
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
  /oauth/authorize/decision:
    post:
      summary: Authorize Decision
      description: 'Handles the user''s decision on the MCP consent screen (Approach B).


        The POST must come from the browser that was shown the consent page: it

        has to carry that page''s one-time ``consent_nonce`` and be signed in as the

        same user. Without this, anyone holding a ``state`` the victim''s browser

        had opened could approve the grant themselves and collect the code.'
      operationId: authorize_decision_oauth_authorize_decision_post
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Body_authorize_decision_oauth_authorize_decision_post'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
  /oauth/authorize/resume/{continue_token}:
    get:
      summary: Resume Mcp Authorize
      description: 'Resumes an MCP OAuth authorization request after the user has

        completed sign-in (email/password or Google web sign-in).


        This closes the loop for users who had no browser session when

        they started the flow from Claude.'
      operationId: resume_mcp_authorize_oauth_authorize_resume__continue_token__get
      parameters:
      - name: continue_token
        in: path
        required: true
        schema:
          type: string
          title: Continue Token
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
  /oauth/token:
    post:
      summary: Token
      description: Token endpoint — exchange auth code, device code or refresh token.
      operationId: token_oauth_token_post
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Body_token_oauth_token_post'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
  /oauth/device_authorization:
    post:
      summary: Device Authorization
      description: RFC 8628 §3.1 — start a device grant for a registered public client.
      operationId: device_authorization_oauth_device_authorization_post
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Body_device_authorization_oauth_device_authorization_post'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
  /oauth/device:
    get:
      summary: Device Page
      description: Code entry → consent screen for a pending device grant.
      operationId: device_page_oauth_device_get
      parameters:
      - name: user_code
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: User Code
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
  /oauth/device/decision:
    post:
      summary: Device Decision
      description: Approve or deny a device grant from the consent screen.
      operationId: device_decision_oauth_device_decision_post
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Body_device_decision_oauth_device_decision_post'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
  /oauth/userinfo:
    get:
      summary: Userinfo
      description: Returns basic user info for the authenticated MCP session.
      operationId: userinfo_oauth_userinfo_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      tags:
      - OAuth
  /oauth/revoke:
    post:
      summary: Revoke
      description: Revokes an MCP access or refresh token.
      operationId: revoke_oauth_revoke_post
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Body_revoke_oauth_revoke_post'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      tags:
      - OAuth
components:
  schemas:
    Body_device_authorization_oauth_device_authorization_post:
      properties:
        client_id:
          type: string
          title: Client Id
        scope:
          type: string
          title: Scope
          default: read write
        resource:
          anyOf:
          - type: string
          - type: 'null'
          title: Resource
      type: object
      required:
      - client_id
      title: Body_device_authorization_oauth_device_authorization_post
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    Body_token_oauth_token_post:
      properties:
        grant_type:
          type: string
          title: Grant Type
        code:
          anyOf:
          - type: string
          - type: 'null'
          title: Code
        redirect_uri:
          anyOf:
          - type: string
          - type: 'null'
          title: Redirect Uri
        client_id:
          type: string
          title: Client Id
        code_verifier:
          anyOf:
          - type: string
          - type: 'null'
          title: Code Verifier
        refresh_token:
          anyOf:
          - type: string
          - type: 'null'
          title: Refresh Token
        device_code:
          anyOf:
          - type: string
          - type: 'null'
          title: Device Code
      type: object
      required:
      - grant_type
      - client_id
      title: Body_token_oauth_token_post
    Body_authorize_decision_oauth_authorize_decision_post:
      properties:
        state:
          type: string
          title: State
        consent:
          type: string
          title: Consent
        consent_nonce:
          type: string
          title: Consent Nonce
          default: ''
        read_only:
          type: string
          title: Read Only
          default: ''
      type: object
      required:
      - state
      - consent
      title: Body_authorize_decision_oauth_authorize_decision_post
    Body_revoke_oauth_revoke_post:
      properties:
        token:
          type: string
          title: Token
        token_type_hint:
          anyOf:
          - type: string
          - type: 'null'
          title: Token Type Hint
      type: object
      required:
      - token
      title: Body_revoke_oauth_revoke_post
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    Body_device_decision_oauth_device_decision_post:
      properties:
        user_code:
          type: string
          title: User Code
        consent:
          type: string
          title: Consent
        consent_nonce:
          type: string
          title: Consent Nonce
          default: ''
        read_only:
          type: string
          title: Read Only
          default: ''
      type: object
      required:
      - user_code
      - consent
      title: Body_device_decision_oauth_device_decision_post