Skip to main content
POST

Headers

​
x-signature
string

HMAC-SHA256 signature: HMAC-SHA256(secretKey, timestamp + METHOD + path + body). Required for API-key authenticated requests (JWT/OAuth session auth is exempt).

​
x-timestamp
string

Request timestamp in epoch milliseconds. Required with x-signature for API-key auth. Rejected if drift exceeds 5 minutes.

Body

application/json

OpenAPI schema McpAuthWithSocialBodyDto. Subset of GraphQL AuthWithSocialInput restricted to Google.

​
type
enum<string>
required

Social provider. Only GOOGLE is currently exposed on the MCP REST API.

Available options:
GOOGLE,
FACEBOOK,
APPLE,
TWITTER,
DISCORD,
TELEGRAM
Example:

"GOOGLE"

​
fingerprint
string
required

Device fingerprint / visitor id.

Example:

"fp_browser_abc123"

​
redirectPath
string

Frontend path the client wants to land on after OAuth verification.

Example:

"/dashboard"

​
receiveMarketingOffers
boolean

Opt-in to marketing offers / communications (applied only if this flow creates a new user).

​
promoCode
string

Promo code (new users only).

​
referrerUsername
string

Username of the referring user (new users only).

​
referrerUserId
string

User id of the referring user (new users only).

Example:

"507f1f77bcf86cd799439011"

Response

OAuth URL generated.

​
success
boolean
required
Example:

true

​
data
object
required

Endpoint-specific payload