Start a connector authorization

get /oauth/authorize

Starts the OAuth 2.0 authorization code flow that connects an AI assistant, such as Claude or ChatGPT, to a person’s Salesbud account. The client is identified by the URL of its client metadata document and must be one of the connector apps Salesbud accepts; redirect_uri must be listed in that document. PKCE is required, with the S256 method only. The browser is sent to the Salesbud consent page, where the person signs in, picks the workspace and authorizes; the consent page then redirects to redirect_uri with code, state and iss. A person who does not approve credentials gets a connection awaiting administrator approval.

Autorização

Sem autenticação.

Parâmetros de query

Nome	Tipo	Obrigatório	Descrição
`response_type`	`code`	Sim	—
`client_id`	`string uri`	Sim	URL of the connector’s client metadata document.
`redirect_uri`	`string uri`	Sim	One of the redirect URIs listed in the client metadata document.
`code_challenge`	`string`	Sim	Base64url SHA-256 of the PKCE code_verifier.
`code_challenge_method`	`S256`	Sim	—
`state`	`string`	Não	Returned unchanged to redirect_uri.
`resource`	`string uri`	Sim	The MCP endpoint the token is for, as the protected resource metadata names it.
`scope`	`string`	Não	Space-separated scopes. Unknown scopes are ignored. Omitted or empty, the connection asks for every scope; the token then carries the ones the person can use in Salesbud.

Exemplo de requisição

curl -i "https://api.salesbud.com.br/oauth/authorize?response_type=code&client_id=...&redirect_uri=...&code_challenge=...&code_challenge_method=S256&state=...&resource=https://api.salesbud.com.br/mcp"

Respostas

Status	Descrição
`302`	Redirect to the Salesbud consent page, or back to redirect_uri with an OAuth error (invalid_request) once redirect_uri has been validated.
`400`	HTML error page, with no redirect, when client_id is not an accepted connector app, its client metadata document cannot be verified, or redirect_uri is not registered for it.
`429`	Client rate limit exceeded.
`503`	A required audit or rate-limit dependency is unavailable.