Skip to main content

Token endpoint

The supplied environment uses the core token endpoint for multiple grants:

https://core.api.aigw.eval.loginid.ai/oauth2/token

Authorization code exchange​

POST /oauth2/token
Content-Type: application/x-www-form-urlencoded

grant_type=authorization_code
&code=<CODE>
&redirect_uri=<REGISTERED_REDIRECT_URI>
&client_id=<AGENT_CLIENT_ID>
&client_secret=<AGENT_CLIENT_SECRET>
&code_verifier=<PKCE_VERIFIER>

The supplied real-user playground run verified a 200 response for this step.

Proxy client credentials​

POST /oauth2/token
Authorization: Basic base64(<PROXY_CLIENT_ID>:<PROXY_CLIENT_SECRET>)
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials

The supplied curl test verified 200, expires_in: 3599, and a bearer token.

These are different OAuth clients with different purposes: the agent client is dynamically registered; the Proxy clientProxy clientThe server-side credential (client ID and secret) the MCP/UCP service uses to authenticate itself to AIGW. Never give it to an agent. is created by the ProjectProjectThe isolation boundary for an integration. It holds Resources, agents and agent policy, end users, and Proxy clients. operator for the MCPMCPModel Context Protocol: a standard way for AI agents to call tools and data sources exposed by a server./UCP server.