OAuth

​

What is it?

Lets third-party apps, browser integrations, and AI hosts (ChatGPT, Claude, Gemini) call the API on behalf of a user.

• Issuer: https://api.notifique.dev
• PKCE required (S256)
• Dynamic Client Registration (DCR)

​

Metadata (discovery)

​

Short flow

1. POST /oauth/register — register client (DCR)
2. Redirect user to /oauth/authorize with PKCE
3. User approves scopes in browser
4. POST /oauth/token — exchange code + code_verifier
5. Call /v1/* with Authorization: Bearer <access_token>

​

Workspace OAuth apps (API v1)

Manage apps created in the workspace dashboard (different from DCR at /oauth/register for MCP hosts): For DCR client registration (ChatGPT, Claude, MCP integrations), use POST /oauth/register — see OAuth Quick Start.

​

Full guide

• OAuth introduction
• OAuth Quick Start
• OAuth scopes

​

Next steps

• Platform introduction
• API keys: when OAuth is not needed