Accounts & authentication
How people can sign in here
GET /api/v1/auth/methods
Lists the server's enabled sign-in methods and signup mode. The ways to sign in that this server has turned on: email links, passkeys, and OpenID Connect providers, and whether anyone may sign up. Anyone may read it.
Example request
curl --request GET 'https://commitscale.com/api/v1/auth/methods'Example values illustrate the format. Use your own credentials and identifiers.
Responses
200 The ways to sign in.
application/json
{
"email_link": false,
"passkeys": false,
"providers": [
{
"id": "google",
"name": "Google"
}
],
"signup": "closed"
}The ways to sign in that this server has turned on.
email_linkrequired · booleanWhether sign-in by email link is enabled.
passkeysrequired · booleanWhether sign-in with a passkey is enabled.
providersrequired · array of objectConfigured OpenID Connect sign-in providers.
Fields of
providersConfigured OpenID Connect sign-in providers.
Each item has this shape.
An OpenID Connect provider, as the login page shows it.
idrequired · stringThis server's name for it, such as
google.namerequired · stringWhat its button says, such as
Google.
signuprequired ·closed/openWhether new accounts may sign up: open or closed.
RateLimit and RateLimit-Policy describe the request rate. Follow Retry-After when a response asks you to wait.
Problem responses
Errors use application/problem+json. Act on the stable code, and follow next when present. See the problem format.
check_key_scope403A check-only key may call the test check, read its own usage and acceptance rule, contact support, and withdraw data sharing.
Use a person's sign-in for account management. More agent power needs the owner's passkey; this key cannot widen itself.
feature_off403The namespace plan does not include this feature.
Retrying on the same plan will not help. GET /api/v1/namespaces/{namespace}/plan, and the namespace's Plan page in Settings, show what its plan includes.
invalid_token401The token is unknown, expired, or revoked, its agent was revoked, or an OAuth token was used outside its MCP resource.
Stop using it. Sign in again, or ask the owner to create a replacement agent key.
forbidden403The caller may not do this: only people may, only owners may, or the agent was not given this repository or write access.
Stop. Retrying will not help. Ask the owner for the access, or leave the step to a person.
quota_exceeded429With 429, the caller used its requests for the minute. With 422, a count limit was reached.
With 429, wait
Retry-Afterseconds and retry. With 422, remove one first.internal500The server failed, and logged why.
Retry after
Retry-Afterseconds. A write is safe to retry with the same idempotency key.