Begin connecting (or reconnecting) an account; returns where to send the browser

Browser session only (403 session_required with an API key). The authorization URL is built from the provider's stored settings, with PKCE S256 when the provider uses it and a single-use state bound to this session, person, provider and connect request; it expires after 10 minutes. The scopes asked for are the union of the connection's granted scopes (when active), scopes (or the provider's default scopes when both scopes and requestId are absent) and the connect request's required scopes. 404 provider_not_found (unknown or turned off). 404 connect_request_not_found (unknown, or another person's); 410 connect_request_expired (expired or used); 409 provider_mismatch (the request is for another provider). 400 invalid_scope; 400 invalid_return_to (returnTo must be a path on this site). 429 slow_down (20 a minute per person). providerId may name a server-bound provider (kind mcp_server) when the caller can use one of that server's capabilities through a gateway now; otherwise 404 provider_not_found. Server editors use authorizeTeamMcpServerSetup instead.

Response BodyCopy Anchor Link