Runtime authentication flows

v1 runtime token exchange

Use POST /api/v1/runtime/auth/token to exchange control-plane credentials for a short-lived runtime token.

Request

curl -X POST "$MCPFACTORY_BASE_URL/api/v1/runtime/auth/token" \
  -H "Authorization: Bearer $MCPFACTORY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "deploymentId": "<deployment-id>",
    "organizationId": "<organization-id>"
  }'

Response

{
  "token": "<runtime-token>",
  "expiresAt": "2026-05-28T21:00:00.000Z",
  "deploymentId": "dep_123",
  "organizationId": "org_123"
}

OAuth runtime grants

Use POST /oauth/runtime/token for provider-backed runtime token flows.

Request

curl -X POST "$MCPFACTORY_BASE_URL/oauth/runtime/token" \
  -H "x-mcpcloud-runtime-token: <runtime-grant-token>" \
  -H "Content-Type: application/json" \
  -d '{ "connectionId": "<oauth-connection-id>", "forceRefresh": false }'

Response

{
  "accessToken": "<oauth-access-token>",
  "tokenType": "Bearer",
  "expiresIn": 3600
}