Kinetica · OAuth Scopes

Kinetica OAuth Scopes

OAuth 2.0 probed

Kinetica publishes 2 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Kinetica API on a user’s behalf.

Tokens are issued from https://app.toolbelt.ai/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

databaseanalyticsgpu-accelerationreal-time-analyticsvector-searchgraph-analyticsgeospatialtime-seriessqlstreamingdata-infrastructuremcpagent-nativerag

Scopes: 2 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://app.toolbelt.ai/oauth/authorize

Token URL
https://app.toolbelt.ai/oauth/token

Flows
authorizationCode

Scopes (2)

Scope	Description	Flows
mcp:tools	Invoke the Toolbelt MCP tools (toolbelt_sql, toolbelt_vector_search, toolbelt_graph_traversal, toolbelt_schema_introspection, toolbelt_ingestion_job_inspection) against the connected Kinetica database.	authorizationCode
openid	OpenID Connect subject identity for the authenticated Toolbelt user.	authorizationCode

📄 Provider scope reference: https://www.kinetica.com/agents

Source

OAuth Scopes

generated: '2026-08-04'
method: probed
source: https://app.toolbelt.ai/.well-known/oauth-authorization-server
docs: https://www.kinetica.com/agents
note: Kinetica's database REST API uses HTTP Basic / bearer tokens and has no OAuth
  scope surface. The scopes below belong to the Toolbelt MCP server, and were read
  from live RFC 8414 authorization-server metadata and RFC 9728 protected-resource
  metadata — not from documentation prose.
schemes:
- name: toolbeltOAuth2
  surface: Kinetica Toolbelt MCP Server
  source: well-known/kinetica-toolbelt-oauth-authorization-server.json
  issuer: https://app.toolbelt.ai
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.toolbelt.ai/oauth/authorize
    tokenUrl: https://app.toolbelt.ai/oauth/token
    registrationUrl: https://app.toolbelt.ai/oauth/register
    code_challenge_methods:
    - S256
scopes:
- scope: mcp:tools
  description: Invoke the Toolbelt MCP tools (toolbelt_sql, toolbelt_vector_search,
    toolbelt_graph_traversal, toolbelt_schema_introspection, toolbelt_ingestion_job_inspection)
    against the connected Kinetica database.
  flows:
  - authorizationCode
  sources:
  - well-known/kinetica-toolbelt-oauth-authorization-server.json
  - well-known/kinetica-toolbelt-oauth-protected-resource.json
  advertised_on_resource: true
- scope: openid
  description: OpenID Connect subject identity for the authenticated Toolbelt user.
  flows:
  - authorizationCode
  sources:
  - well-known/kinetica-toolbelt-oauth-authorization-server.json
  advertised_on_resource: false
protected_resources:
- resource: https://mcp.toolbelt.ai/mcp
  authorization_servers:
  - https://app.toolbelt.ai
  scopes_supported:
  - mcp:tools
  bearer_methods_supported:
  - header
x-evidence:
  fetched: '2026-08-04'
  probes:
  - url: https://app.toolbelt.ai/.well-known/oauth-authorization-server
    http_status: 200
    content_type: application/json
  - url: https://mcp.toolbelt.ai/.well-known/oauth-protected-resource
    http_status: 200
    content_type: application/json