Outpost

Outpost OAuth API

Server-to-server access tokens.

Documentation GitHub OpenAPI

Operations 1

POST /oauth/token Exchange client credentials for an access token #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/outpost-ai:outpost-ai-oauth-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Outpost Ai OAuth API
  version: 0.1.0
  description: 'Operations tagged OAuth across 2 of this provider''s published API definitions: outpost-ai-stripe-mor.yaml, stripe-billing-mor.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.outpostanywhere.com
  description: Production
security:
- bearerAuth: []
tags:
- name: OAuth
  description: Server-to-server access tokens.
paths:
  /oauth/token:
    post:
      tags:
      - OAuth
      summary: Exchange client credentials for an access token
      description: 'Standard OAuth2 `client_credentials` grant. Tokens are short-lived;

        cache them server-side with `expires_in - 300s` of headroom and refresh

        on `401`. **Never** call this endpoint from a browser.'
      operationId: createAccessToken
      security: []
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/TokenRequest'
            example:
              grant_type: client_credentials
              client_id: ci_live_abc123
              client_secret: cs_live_xxxxxxxx
              scope: charges.write setup_intents.write
      responses:
        '200':
          description: Token issued.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
              example:
                access_token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
                token_type: Bearer
                expires_in: 3600
                scope: charges.write setup_intents.write
        '400':
          description: Invalid grant or missing fields.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Bad client credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
    servers:
    - url: https://api.outpostanywhere.com
      description: Production
components:
  schemas:
    TokenResponse:
      type: object
      required:
      - access_token
      - token_type
      - expires_in
      properties:
        access_token:
          type: string
        token_type:
          type: string
          const: Bearer
        expires_in:
          type: integer
          description: Seconds until expiry. Cache with `expires_in - 300s` headroom.
        scope:
          type: string
    Error:
      type: object
      required:
      - code
      properties:
        code:
          type: string
          examples:
          - invalid_request
        message:
          type: string
    TokenRequest:
      type: object
      required:
      - grant_type
      - client_id
      - client_secret
      properties:
        grant_type:
          type: string
          const: client_credentials
        client_id:
          type: string
          description: Issued by Outpost during onboarding.
        client_secret:
          type: string
          description: Issued by Outpost during onboarding. Server-side only.
        scope:
          type: string
          description: Space-separated scopes.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: 'Obtain via `POST /oauth/token` with the `client_credentials` grant.

        Send as `Authorization: Bearer <access_token>` on every Outpost API

        endpoint.

        '
x-refined-from:
- outpost-ai-stripe-mor.yaml
- stripe-billing-mor.yaml