Skip to main content
POST
Authorize MCP OAuth

Authorizations

Authorization
string
header
required

API key authentication. Get your API key from the Duvo dashboard.

Path Parameters

teamId
string
required

Body

application/json
mcp_server_url
string<uri>
required

URL of the MCP server requiring OAuth.

name
string
required

Human-readable name to display for the connection.

Minimum string length: 1
custom_integration_id
string<uuid>

Optional ID of a custom integration this connection should be associated with.

return_url
string

Where to send the user's browser after consent completes. Accepts an absolute URL on a domain Duvo allows, or a path relative to the Duvo frontend (e.g. /integrations/slack).

integration_type
string

Optional catalog integration type (e.g. netsuite, asana). When it names a known MCP OAuth catalog integration and mcp_server_url matches that integration's registered server, the connection is treated as a catalog connection; otherwise it requires the custom MCP servers capability.

reconnect_instance_id
string<uuid>

When set, the OAuth flow will update the existing connection in place rather than creating a new one.

oauth_client_id
string

OAuth client ID of a client the user registered on the authorization server themselves (e.g. a NetSuite Integration record). Takes precedence over preregistered credentials and Dynamic Client Registration. Cannot be combined with custom_integration_id. On reconnect, omit to reuse the connection's stored credentials, or provide to replace (rotate) them.

Minimum string length: 1
oauth_client_secret
string

Client secret for oauth_client_id. Omit for public clients (PKCE-only).

Minimum string length: 1

Response

Default Response

authorization_url
string
required

OAuth provider authorization URL to open in a browser