Contents

Start signing in with a provider

A browser page load, not an API call. Redirects to the provider (authorization code flow with PKCE S256, state and nonce) and sets a short-lived HttpOnly cookie that ties the sign-in to this browser. intent=sign_in or sign_up comes back to the web app at /auth/complete; intent=mcp carries a pending /oauth/authorize request (its client_id, redirect_uri, code_challenge, scope, state and resource) and returns to that MCP client. Shares the per-address limit with code requests.

GET /auth/sso/{provider}/start

Path parameters

  • provider "google" | "microsoft" Required

Query parameters

  • intent "sign_in" | "sign_up" | "mcp"
  • invite string

    An invitation token (sign_up only).