Huntress · OAuth Scopes

Huntress OAuth Scopes

OAuth 2.0 searched

Huntress publishes 1 OAuth 2.0 scope via the authorizationCode and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Huntress API on a user’s behalf.

Tokens are issued from https://api.huntress.io/v1/mcp/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanySecurityCybersecurityManaged Detection and ResponseEndpoint SecuritySOCSIEMIdentity Threat DetectionMSPWebhooks
Scopes: 1 Flows: authorizationCode, clientCredentials Method: searched

OAuth endpoints

Authorization URL
https://api.huntress.io/v1/mcp/authorize
Token URL
https://api.huntress.io/v1/mcp/token
Flows
authorizationCodeclientCredentials

Scopes (1)

ScopeDescriptionFlows
mcp Grants an OAuth client access to the Huntress remote MCP server. authorizationCode, clientCredentials

Source

OAuth Scopes

Raw ↑
generated: '2026-07-19'
method: searched
source: https://api.huntress.io/.well-known/oauth-authorization-server
docs: https://api.huntress.io/.well-known/oauth-protected-resource
note: >-
  The Huntress REST API uses HTTP Basic auth (no OAuth scopes). OAuth 2.1 applies
  only to the remote MCP server, whose authorization-server metadata advertises a
  single coarse-grained scope.
schemes:
  - name: MCP OAuth
    source: https://api.huntress.io/.well-known/oauth-authorization-server
    flows:
      - flow: authorizationCode
        authorizationUrl: https://api.huntress.io/v1/mcp/authorize
        tokenUrl: https://api.huntress.io/v1/mcp/token
      - flow: clientCredentials
        tokenUrl: https://api.huntress.io/v1/mcp/token
scopes:
  - scope: mcp
    description: Grants an OAuth client access to the Huntress remote MCP server.
    flows: [authorizationCode, clientCredentials]
    sources: [https://api.huntress.io/.well-known/oauth-authorization-server]