Skip to main content
GET
Check an authorization request
You do not need this call to run the OAuth flow. Send people to https://app.postqueen.ai/oauth/authorize with your client_id, response_type=code and state: that page makes this call, shows your app’s name, description and picture, and asks the person to Authorize or Deny. The whole flow is on OAuth apps. It is useful to check a Client ID from your own code: a valid one answers 200 with the app’s details, and an unknown one 400 Invalid client_id.
This endpoint is outside /public/v1 and takes no API key. A client that registered itself must also send one of its redirect_uris, and one without a secret must send a PKCE code_challenge with method S256.

Query Parameters

client_id
string
required

The app's client id: pca_... for an app made under Connections > Developers, pcd_... for a registered client

response_type
enum<string>
required

Must be code. No other response type is supported.

Available options:
code
state
string

An opaque value echoed back in the response and in the redirect to your app. Use a random value to protect against CSRF.

redirect_uri
string

Required for a registered client, and must be one of its redirect_uris. An app made under Connections > Developers always uses its stored Redirect URL

code_challenge
string

PKCE challenge. Required for a registered client without a secret

code_challenge_method
string

PKCE method. A registered client must use S256

scope
string

Accepted and not used; the granted scope comes back on the token response

Response

The OAuth application is valid

app
object
state
string

The state you sent, echoed back. Absent if you did not send one.

Last modified on September 23, 2026