MCP OAuth Setup

Last updated:

This page defines the required OAuth setup for all Revspire MCP integrations.

Requirement

Revspire MCP requires OAuth bearer tokens. Session cookies and basic auth are not supported for production MCP access.

Global MCP URL

https://mcp.revspire.io/mcp

Where To Configure OAuth Connections

Revspire > Setup > OAuth

Use a Template

  • Claude MCP Browser Flow (Production)
  • ChatGPT MCP Browser Flow (Production)
  • n8n MCP Browser Flow (Production)
  • Zapier MCP Browser Flow (Production)
  • HubSpot MCP Browser Flow (Production)
  • Postman MCP Browser Flow (Production)
  • Insomnia MCP Browser Flow (Production)

OAuth Metadata and Endpoints

MCP clients should use OAuth discovery from metadata instead of hardcoded endpoint values.

Protected Resource Metadata
https://mcp.revspire.io/.well-known/oauth-protected-resource/mcp

Authorization Server Metadata
https://mcp.revspire.io/.well-known/oauth-authorization-server

Discovered OAuth Endpoints
authorization_endpoint: https://login.api.revspire.io/oauth/authorize
token_endpoint: https://login.api.revspire.io/oauth/token
introspection_endpoint: https://login.api.revspire.io/oauth/introspect
revocation_endpoint: https://login.api.revspire.io/oauth/revoke
registration_endpoint: https://login.api.revspire.io/oauth/register

Scopes

Primary MCP scopes

revspire.agentforce.tools.read
revspire.agentforce.tools.write

Equivalent accepted scopes

revspire.mcp.tools.read
revspire.mcp.tools.write

Client-Specific Notes

  • Claude : use OAuth with DCR . Claude discovers endpoints and scopes from metadata; do not manually enter Authorize/Token URLs.
  • ChatGPT App Builder : supports DCR or User-Defined OAuth Client . If discovery does not work in your environment, use User-Defined OAuth Client with manual endpoint values.
  • ChatGPT PKCE note : currently does not support PKCE. Disable PKCE requirement for ChatGPT OAuth connections.
  • n8n : update callback URL to your n8n OAuth callback URL.
  • Postman : callback URL is https://oauth.pstmn.io/v1/callback .
  • Insomnia : callback URL is https://insomnia.rest/oauth2/callback .

Validation Checklist

  1. GET /mcp/health succeeds with OAuth token.
  2. tools/list returns tools permitted for the current user.
  3. User sees only tools allowed by license + permissions.
  4. Mutation calls require write scope and matching permission.