Skip to main content
POST
OAuth approve

Authorizations

__Secure-vitalog-oauth
string
cookie
required

Signed HttpOnly consent-flow cookie from /oauth/authorize, valid for five minutes. Loopback development uses vitalog-oauth.

Headers

Origin
string<uri>
required

Body

application/json
csrf_token
string
required
Pattern: ^[A-Za-z0-9_-]{43}$
action
string
required
Allowed value: "allow"
email
string<email>
required
Maximum string length: 254
Pattern: ^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
password
string
required
Minimum string length: 1

Response

Validated MCP client callback URL; no API key is returned

redirect_to
string<uri>
required