Oauth Preflight
Report whether a connection can be authorized, and with what.
Every outcome is a 200: “this server has no OAuth” is an answer the UI renders, not a failure it has to decode.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Slug of the workspace the request acts in
120^[a-z0-9]+(?:-[a-z0-9]+)*$Query Parameters
MCP instance to inspect
Catalog MCP spec to inspect before any instance exists
Catalog API to inspect before connecting it
Response
Successful Response
What the UI needs before it can offer Connect.
ready — Connect runs unattended, with the client credential_source
names: the operator's platform app, or one registered dynamic-ally.
oauth_app_required — ask for a client ID/secret first.
unsupported — this cannot be authorized with OAuth; detail says why.
ready, oauth_app_required, unsupported platform, dynamic