GSC Wizard Authentication

generated: '2026-11-11'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://www.gscwizard.com/docs/bing.html
sources:
- https://www.gscwizard.com/docs/bing.html
- https://www.gscwizard.com/auth.md
- https://www.gscwizard.com/docs/mcp-and-chatgpt.html
description: Authentication methods for GSC Wizard MCP and REST API
schemes:
- type: oauth2
  name: OAuth 2.1 (authorization code + PKCE)
  evidence: OAuth 2.1 (authorization code + PKCE) | An MCP client or agent acting for a user who can sign in interactively
  location: header
  header: Authorization
  token_url: https://tool.gscwizard.com/api/oauth/token
  authorize_url: https://tool.gscwizard.com/oauth/authorize
  scopes:
  - mcp:read
  - mcp:write
  how_to_obtain: Register a client dynamically by POSTing client metadata to https://tool.gscwizard.com/api/oauth/register, then follow the authorization‑code
    with PKCE flow (send user to the authorize URL, exchange code at the token URL).
- type: apiKey
  name: API key
  evidence: API key | Scripts, servers, CI, and MCP clients that cannot run OAuth
  location: header
  header: Authorization
  how_to_obtain: User creates a key in the app under Account → API keys (https://tool.gscwizard.com/account/api-keys) and chooses a read or write
    scope. The key is shown once and used as a Bearer token.
docs: https://www.gscwizard.com/docs/bing.html