Server details
Always use the root origin
https://mcp.terminal49.com — it is the canonical OAuth resource identifier, so OAuth clients bind to the correct token audience.
OAuth 2.1 (recommended — no API key)
Point your client athttps://mcp.terminal49.com with no credentials. Clients that implement MCP authorization discover everything automatically:
- Protected resource metadata is served at
https://mcp.terminal49.com/.well-known/oauth-protected-resource, which points to the authorization server athttps://auth.terminal49.com. - Dynamic Client Registration is supported, so clients register themselves — no pre-configured client ID or secret is needed.
- The flow is authorization code with PKCE: the client opens your browser, you sign in with your Terminal49 credentials and approve access, and the client stores and refreshes tokens automatically.
API key (for clients without OAuth support)
If your client can’t run a browser OAuth flow (for example, a headless integration), create an API key in the developer portal and send it in theAuthorization header with the Token scheme:
curl:
Use the
Token scheme for API keys. The Bearer scheme is used for OAuth access tokens, which OAuth-capable clients obtain automatically during sign-in.Related guides
- MCP Overview – Tools, prompts, and resources reference
- MCP Server Quickstart – Full setup, local stdio development, deployment
- Test Numbers – Containers for testing