Skip to main content
POST
Provision MCP client-credentials

Authorizations

Authorization
string
header
required

API key for authentication. Format: gcai_xxxxxxxxx

Create API keys in the GC AI app under Settings → API.

Response

A newly minted credential (secret shown once)

client_id
string
required

The M2M application's client ID. Stable across rotations; configure it as the OAuth client ID in Salesforce.

Example:

"client_01HXWKHA5SX0JZYAD037JBE3PT"

client_secret
string
required

The client secret for the client-credentials grant. Shown only once, here, at creation. Store it securely; it cannot be retrieved again.

token_endpoint
string<uri>
required

The OAuth 2.0 token endpoint to exchange the credential for an access token (grant_type=client_credentials).

Example:

"https://your-org.authkit.app/oauth2/token"

resource
string<uri>
required

The MCP resource URL to send as the resource parameter on the token request (OAuth 2.1). Also the MCP endpoint the issued token is used against.

Example:

"https://app.example.com/api/mcp"

grant_type
enum<string>
required

The OAuth 2.0 grant type to use with this credential.

Available options:
client_credentials