Oauth Preflight
Report whether this instance can be authorized, and with what.
Every outcome is a 200: “this server has no OAuth” is an answer the UI renders, not a failure it has to decode from an error response.
GET
Oauth Preflight
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
MCP instance to inspect
Response
Successful Response
What the UI needs before it can offer a Connect action.
ready — Connect can run unattended (the server supports DCR).
oauth_app_required — ask for a client ID/secret first.
unsupported — this server cannot be authorized this way; say why.
Last modified on September 23, 2026