Skip to main content
POST
/
api
/
auth
/
social
/
url
curl --request POST \
  --url https://mcp.echozero.app/api/auth/social/url \
  --header 'Content-Type: application/json' \
  --data '
{
  "type": "GOOGLE",
  "fingerprint": "fp_browser_abc123"
}
'
{
  "success": true,
  "data": {
    "url": "<string>",
    "errorMessage": "<string>"
  }
}

Headers

​
x-signature
string

HMAC-SHA256 signature: HMAC-SHA256(secretKey, timestamp + METHOD + path + body). Optional -- when omitted, HMAC verification is skipped.

​
x-timestamp
string

Request timestamp in epoch milliseconds. Required when x-signature is provided. Rejected if drift exceeds 5 minutes.

Body

application/json

OpenAPI schema McpAuthWithSocialBodyDto. Subset of GraphQL AuthWithSocialInput restricted to Google.

​
type
enum<string>
required

Social provider. Only GOOGLE is currently exposed on the MCP REST API.

Available options:
GOOGLE,
FACEBOOK,
APPLE,
TWITTER,
DISCORD,
TELEGRAM
Example:

"GOOGLE"

​
fingerprint
string
required

Device fingerprint / visitor id.

Example:

"fp_browser_abc123"

​
redirectPath
string

Frontend path the client wants to land on after OAuth verification.

Example:

"/dashboard"

​
receiveMarketingOffers
boolean

Opt-in to marketing offers / communications (applied only if this flow creates a new user).

​
promoCode
string

Promo code (new users only).

​
referrerUsername
string

Username of the referring user (new users only).

​
referrerUserId
string

User id of the referring user (new users only).

Example:

"507f1f77bcf86cd799439011"

Response

OAuth URL generated.

​
success
boolean
required
Example:

true

​
data
object
required

Endpoint-specific payload