Skip to main content
POST
Create Device Authorization

Body

application/json
clientId
enum<string>
required
Available options:
korve-cli,
korve-mcp
audience
enum<string>
required

The first-party client surface that may present the resulting token.

Available options:
cli,
mcp
scopes
string[]
required

Exact public API operation ids the grant may call.

Required array length: 1 - 256 elements
Maximum string length: 128
Pattern: ^[A-Za-z][A-Za-z0-9]*\.[A-Za-z][A-Za-z0-9]*$
requestedRole
enum<string>
required

Maximum organization role the grant may exercise. Owner grants do not exist.

Available options:
member,
admin

Response

Device authorization created. Show the user code, then poll the token endpoint with the device code.

deviceCode
string
required

Client-held polling secret; never shown to the approving user.

userCode
string
required

Human-entered pairing code in XXXX-XXXX form, from an unambiguous alphabet.

Maximum string length: 9
Pattern: ^[BCDFGHJKLMNPQRSTVWXZ]{4}-[BCDFGHJKLMNPQRSTVWXZ]{4}$
verificationUri
string<uri>
required
verificationUriComplete
string<uri>
required

The verification page with the user code pre-filled.

expiresIn
integer
required
Required range: x >= 1
interval
integer
required

Minimum seconds between token polls.

Required range: x >= 1