⌘ K
OpenAPI

API REFERENCE

OAuth and OIDC endpoints

Authorization code, token, UserInfo, revocation, discovery, and JWKS endpoints.

POST/oauth/authorize

Issue an authorization code

This operation is part of the public Lucion Identity contract.

Safe request
# Interactive consent endpoint: use the Lucion-hosted authorization screen in a browser.
# It requires the signed-in session cookie, exact Origin, and CSRF token; do not call it from a server-to-server script.

Authentication

session + PKCE

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/oauth/authorize/context

Validate an OAuth consent request before rendering

This operation is part of the public Lucion Identity contract.

Safe request
curl -G 'https://identity.lucionglobal.com/oauth/authorize/context' --data-urlencode 'client_id=YOUR_CLIENT_ID' --data-urlencode 'redirect_uri=YOUR_REGISTERED_REDIRECT_URI' --data-urlencode 'response_type=code' --data-urlencode 'scope=identity.api_keys.create offline_access' --data-urlencode 'state=YOUR_RANDOM_STATE' --data-urlencode 'code_challenge=YOUR_BASE64URL_SHA256_CHALLENGE' --data-urlencode 'code_challenge_method=S256' --data-urlencode 'resource=https://identity.lucionglobal.com/mcp'

Authentication

public + exact registered redirect + PKCE

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/oauth/register

Register a public OAuth client for a remote MCP connector

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/oauth/register'
  -H 'Content-Type: application/json'
  --data '{"client_name":"Example MCP client","application_type":"native","redirect_uris":["http://127.0.0.1:43123/oauth/callback"],"token_endpoint_auth_method":"none","grant_types":["authorization_code","refresh_token"],"response_types":["code"]}'

Authentication

rate limit + HTTPS/loopback redirect validation

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/oauth/token

Exchange a code or refresh token

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/oauth/token'
  -H 'Content-Type: application/x-www-form-urlencoded'
  --data-urlencode 'grant_type=authorization_code'
  --data-urlencode 'code=YOUR_AUTHORIZATION_CODE'
  --data-urlencode 'client_id=YOUR_CLIENT_ID'
  --data-urlencode 'redirect_uri=YOUR_REDIRECT_URI'
  --data-urlencode 'code_verifier=YOUR_CODE_VERIFIER'
  --data-urlencode 'resource=https://identity.lucionglobal.com/mcp'

Authentication

client authentication

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/oauth/userinfo

Return scoped OIDC claims

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/oauth/userinfo'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

OAuth bearer

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/oauth/revoke

Revoke an OAuth token and its refresh-token family

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/oauth/revoke'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

OAuth token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/.well-known/oauth-protected-resource/mcp

Read protected-resource metadata for the MCP server

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/.well-known/oauth-protected-resource/mcp'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/.well-known/openid-configuration

Read OIDC discovery metadata

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/.well-known/openid-configuration'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/.well-known/oauth-authorization-server

Read OAuth metadata

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/.well-known/oauth-authorization-server'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/.well-known/jwks.json

Read public OIDC signing keys

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/.well-known/jwks.json'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

The OIDC metadata and JWKS endpoints are public. Token endpoints remain gated by the deployment's production OAuth capability and enforce the registered application and PKCE contract.