> ## Documentation Index > Fetch the complete documentation index at: https://docs.prelude.so/llms.txt > Use this file to discover all available pages before exploring further. # Get OAuth server config > Get the OAuth 2.0 authorization-server configuration for the application. ## OpenAPI ````yaml get /v2/session/apps/{appID}/oauth openapi: 3.1.1 info: title: Prelude Session Management API version: 0.0.1 summary: The Prelude API for Session Management description: The Prelude API for Session Management. contact: email: support@prelude.so url: https://prelude.so servers: - url: https://api.prelude.dev description: Production server security: - Authorization: [] tags: - name: Mode description: Manage the mode (dev/prod) of your application. - name: Tokens description: Mint development tokens for your application. - name: Users description: Manage the users of your application. - name: Webhooks description: Manage the webhooks of your application. - name: Domains description: Manage the domains of your application. - name: Config - Scopes description: Manage the scope configuration of your application. - name: Config - Groups description: >- Manage the group configuration of your application. A group owns a set of scopes; users assigned to a group are granted the group's scopes. - name: Config - Claims description: Manage the claims mapping configuration of your application. - name: Config - Step-up description: Manage the step-up authentication configuration of your application. - name: Config - Migration description: Manage the user migration configuration of your application. - name: Config - Login OTP description: Manage the OTP login configuration of your application. - name: Config - Login OAuth description: Manage the OAuth login configuration of your application. - name: Config - Login SAML description: Manage the SAML 2.0 SSO connections of your application. - name: Config - Login Password description: Manage the password login configuration of your application. - name: Config - Passkey description: Manage the WebAuthn passkey configuration of your application. - name: Config - OAuth Server description: >- Configure your application as an OAuth 2.0 authorization server so MCP clients and other third-party apps can sign your users in. paths: /v2/session/apps/{appID}/oauth: parameters: - $ref: '#/components/parameters/appIDParam' get: tags: - Config - OAuth Server summary: Get OAuth server config description: >- Get the OAuth 2.0 authorization-server configuration for the application. operationId: getOAuthServerConfig responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/OAuthServerConfigResponse' '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/OAuthServerConfigNotFoundError' components: parameters: appIDParam: in: path name: appID required: true description: The id of the app the request refers to. schema: $ref: '#/components/schemas/AppID' schemas: OAuthServerConfigResponse: type: object properties: default_provider_url: type: string examples: - https://auth.example.com registration: $ref: '#/components/schemas/OAuthRegistrationConfig' updated_at: type: integer format: int64 description: Unix timestamp (seconds) of the last update. examples: - 1718000000 required: - default_provider_url - registration - updated_at OAuthServerConfigNotFoundError: type: object properties: code: type: string enum: - oauth_server_config_not_found examples: - oauth_server_config_not_found status: type: string enum: - not_found examples: - not_found message: type: string examples: - OAuth server config has not been set for this app. required: - code - status - message AppID: type: string description: An application's unique identifier. examples: - 54e9ujn - fvua38g OAuthRegistrationConfig: type: object description: How third-party clients come to exist, and the settings they share. properties: redirect_uri_allowlist: type: array description: >- URI patterns every registration mechanism validates client `redirect_uri`s against. Each entry is a literal URI or a prefix ending in a single `*`. items: type: string examples: - - https://claude.ai/api/mcp/auth_callback - http://localhost/* dcr: description: Dynamic Client Registration policy. Omit to disable DCR. oneOf: - $ref: '#/components/schemas/OAuthDCRConfig' - type: 'null' cimd: description: Client ID Metadata Document policy. Omit to disable CIMD. oneOf: - $ref: '#/components/schemas/OAuthCIMDConfig' - type: 'null' OAuthDCRConfig: type: object description: Dynamic Client Registration (RFC 7591) policy. Present enables DCR. properties: default_scopes: type: array description: >- Scopes seeded onto every DCR-registered client, on top of what it requests. items: type: string examples: - - mcp:read auto_registered_client_ttl_seconds: type: integer format: int64 description: >- Expiry, in seconds, for DCR-issued clients. Omit for no expiry; must be positive when set. examples: - 2592000 OAuthCIMDConfig: type: object description: Client ID Metadata Document (CIMD) policy. Present enables CIMD. properties: client_url_allowlist: type: array description: >- `https`-only patterns restricting which `client_id` URLs the server will fetch. Each entry is a literal URL or a prefix ending in a single `*`. items: type: string examples: - - https://claude.ai/* default_scopes: type: array description: Scopes seeded onto every CIMD client, on top of what it requests. items: type: string examples: - - mcp:read cache_ttl_seconds: type: integer format: int64 description: >- How long a fetched metadata document is reused across flows. Omit for the resolver default; must be positive when set. examples: - 86400 securitySchemes: Authorization: type: http scheme: bearer ````