API referenceM C P
Revoke an access or refresh token (RFC 7009)
POST
Always 200. A refresh token takes its whole family with it.
application/x-www-form-urlencoded- body
[key: string]?anyRevoked, or nothing to revoke
curl -X POST 'http://127.0.0.1:7777/oauth/revoke' \ -H 'Content-Type: application/x-www-form-urlencoded' \ -d 'token=x'Example Response200
Empty
Register a client dynamically (RFC 7591) POST
A public client with its redirect URIs, good for thirty days of use. Clients with a metadata document need no registration.
Deliver a webhook POST
Continues every session waiting on `key` (the `wait_for` tool) and starts every flow with `on: { hook: key }`, with the body as the next message. No token: the body is signed with the server's `hookSecret`. GitHub's `x-hub-signature-256` and `x-github-delivery` work as they are.