find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/intentdocs-com:intentdocs-com-oauth-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Intentdocs Com OAuth API
  version: '2026-08-22'
  contact:
    name: IntentDocs Support
    url: https://intentdocs.com
    email: support@intentdocs.com
  license:
    name: Proprietary
    url: https://intentdocs.com/terms
  x-api-version: '2026-08-22'
  x-deprecation-policy: Breaking changes are announced at least 90 days before removal. Deprecated endpoints return a Deprecation header with the sunset date. Subscribe to the changelog at https://intentdocs.com/blog for updates.
  description: 'Operations tagged OAuth across 2 of this provider''s published API definitions: openapi.json, intentdocs-com-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://intentdocs.com
  description: Production server
- url: http://localhost:3000
  description: Development server
tags:
- name: OAuth
  description: OAuth 2.1 authorization and token endpoints
paths:
  /api/oauth/authorize:
    get:
      operationId: oauthAuthorizeGet
      tags:
      - OAuth
      summary: OAuth 2.1 authorization endpoint (GET)
      description: Initiate OAuth 2.1 authorization flow. Redirects to login if not authenticated, then to the redirect_uri with authorization code.
      parameters:
      - name: client_id
        in: query
        required: true
        schema:
          type: string
        description: The OAuth client ID
      - name: redirect_uri
        in: query
        required: false
        schema:
          type: string
        description: Where to redirect after authorization. Must be registered with client.
      - name: response_type
        in: query
        required: true
        schema:
          enum:
          - code
        description: Must be 'code' for authorization code flow
      - name: code_challenge
        in: query
        required: true
        schema:
          type: string
        description: PKCE code challenge (required for S256)
      - name: code_challenge_method
        in: query
        required: true
        schema:
          enum:
          - S256
        description: PKCE method — only S256 is supported
      - name: state
        in: query
        required: false
        schema:
          type: string
        description: Opaque state value to prevent CSRF
      - name: scope
        in: query
        required: false
        schema:
          type: string
        description: Requested scopes (space-separated)
      responses:
        '302':
          description: Redirect to login or redirect_uri with authorization code
        '400':
          description: Invalid request
    post:
      operationId: oauthAuthorizePost
      tags:
      - OAuth
      summary: OAuth 2.1 authorization endpoint (POST)
      description: Same as GET but accepts parameters in request body.
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              required:
              - client_id
              - response_type
              - code_challenge
              - code_challenge_method
              properties:
                client_id:
                  type: string
                redirect_uri:
                  type: string
                response_type:
                  enum:
                  - code
                code_challenge:
                  type: string
                code_challenge_method:
                  enum:
                  - S256
                state:
                  type: string
                scope:
                  type: string
      responses:
        '302':
          description: Redirect with authorization code
        '400':
          description: Invalid request
    servers:
    - url: https://intentdocs.com
      description: Production server
    - url: http://localhost:3000
      description: Development server
  /api/oauth/token:
    post:
      operationId: oauthToken
      tags:
      - OAuth
      summary: OAuth 2.1 token endpoint
      description: Exchange authorization code for access token. Validates PKCE code_verifier.
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              required:
              - grant_type
              - code
              - code_verifier
              - client_id
              properties:
                grant_type:
                  enum:
                  - authorization_code
                  description: Must be authorization_code
                code:
                  type: string
                  description: Authorization code from authorize endpoint
                code_verifier:
                  type: string
                  description: PKCE code verifier
                client_id:
                  type: string
                  description: OAuth client ID
                redirect_uri:
                  type: string
                  description: Must match the redirect_uri from authorize
      responses:
        '200':
          description: Access token issued
          content:
            application/json:
              schema:
                type: object
                properties:
                  access_token:
                    type: string
                    description: Bearer token (intent_cli_* prefix)
                  token_type:
                    enum:
                    - Bearer
                  expires_in:
                    type: number
                    description: Seconds until token expires
        '400':
          description: Invalid request or PKCE verification failed
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                  error_description:
                    type: string
    options:
      operationId: oauthTokenOptions
      tags:
      - OAuth
      summary: CORS preflight for token endpoint
      responses:
        '204':
          description: Preflight successful
    servers:
    - url: https://intentdocs.com
      description: Production server
    - url: http://localhost:3000
      description: Development server
  /api/oauth/register:
    post:
      operationId: oauthRegister
      tags:
      - OAuth
      summary: OAuth 2.1 dynamic client registration
      description: Register a new OAuth client and receive client credentials.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - redirect_uris
              properties:
                redirect_uris:
                  type: array
                  items:
                    type: string
                  description: Registered redirect URIs
                client_name:
                  type: string
                client_uri:
                  type: string
                token_endpoint_auth_method:
                  enum:
                  - none
                  - client_secret_post
                  default: none
                grant_types:
                  type: array
                  items:
                    enum:
                    - authorization_code
                  default:
                  - authorization_code
                response_types:
                  type: array
                  items:
                    enum:
                    - code
                  default:
                  - code
      responses:
        '201':
          description: Client registered successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  client_id:
                    type: string
                  client_secret:
                    type: string
                    description: Only present for confidential clients (token_endpoint_auth_method != 'none')
                  client_id_issued_at:
                    type: number
                  client_secret_expires_at:
                    type: number
                  redirect_uris:
                    type: array
                    items:
                      type: string
                  client_name:
                    type: string
                  client_uri:
                    type: string
        '400':
          description: Invalid registration request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
    options:
      operationId: oauthRegisterOptions
      tags:
      - OAuth
      summary: CORS preflight for registration endpoint
      responses:
        '204':
          description: Preflight successful
    servers:
    - url: https://intentdocs.com
      description: Production server
    - url: http://localhost:3000
      description: Development server
  /.well-known/oauth-server:
    get:
      operationId: oauthServerMetadata
      tags:
      - OAuth
      summary: OAuth 2.1 server metadata
      description: Published server metadata for automatic discovery of OAuth endpoints.
      responses:
        '200':
          description: Server metadata
          content:
            application/json:
              schema:
                type: object
                properties:
                  issuer:
                    type: string
                  authorization_endpoint:
                    type: string
                  token_endpoint:
                    type: string
                  registration_endpoint:
                    type: string
                  response_types_supported:
                    type: array
                    items:
                      enum:
                      - code
                  grant_types_supported:
                    type: array
                    items:
                      enum:
                      - authorization_code
                  token_endpoint_auth_methods_supported:
                    type: array
                    items:
                      enum:
                      - client_secret_post
                      - none
                  code_challenge_methods_supported:
                    type: array
                    items:
                      enum:
                      - S256
                  scopes_supported:
                    type: array
    servers:
    - url: https://intentdocs.com
      description: Production server
    - url: http://localhost:3000
      description: Development server
  /.well-known/oauth-protected-resource:
    get:
      operationId: oauthResourceMetadata
      tags:
      - OAuth
      summary: OAuth 2.1 protected resource metadata
      description: Metadata for OAuth-protected resources. Points to the MCP server endpoint.
      responses:
        '200':
          description: Resource metadata
          content:
            application/json:
              schema:
                type: object
                properties:
                  resource:
                    type: string
                  authorization_servers:
                    type: array
                  scopes_supported:
                    type: array
                  resource_name:
                    type: string
    servers:
    - url: https://intentdocs.com
      description: Production server
    - url: http://localhost:3000
      description: Development server
components:
  schemas:
    ErrorResponse:
      type: object
      required:
      - error
      properties:
        error:
          type: object
          required:
          - code
          - message
          properties:
            code:
              type: string
              description: Machine-readable error code (e.g. unauthorized, not_found, bad_request)
            message:
              type: string
              description: Human-readable error description
            hint:
              type: string
              description: Actionable suggestion for resolving the error
  securitySchemes:
    bearerAuth:
      type: oauth2
      description: OAuth 2.1 bearer token. Obtain via /api/oauth/authorize → /api/oauth/token flow, or use intent_cli_* tokens from /api/cli/auth.
      flows:
        authorizationCode:
          authorizationUrl: https://intentdocs.com/api/oauth/authorize
          tokenUrl: https://intentdocs.com/api/oauth/token
          scopes:
            read:projects: Read project metadata and story maps
            write:projects: Create and modify projects
            read:maps: Read story map data, stories, and criteria
            write:maps: Modify stories, log decisions, and report progress
            read:specs: Read generated specifications and build orders
            write:specs: Generate and update specifications
    clerkAuth:
      type: apiKey
      in: cookie
      name: __session
      description: Clerk session cookie (browser auth only)
x-refined-from:
- openapi.json
- intentdocs-com-openapi.json