How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Charthop oauth API

The oauth API from Charthop — 17 operation(s) for oauth.

Charthop oauth API is one of 87 APIs that Charthop publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 19 operations across 17 paths, and defines 10 schemas. It is described by OpenAPI 3.2.0, at version V1.0.0.

Requests are made against 2 base URLs: https://localhost, http://localhost.

19 operations 17 paths 10 schemas 2 DELETE7 GET10 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
V1.0.0
Base URL
https://api.charthop.com
Contact
Resource Areas
1

Paths & Operations 19

Across 17 paths, the API surfaces 19 operations — 2 DELETE, 7 GET, 10 POST. Each is listed below with its method, path, parameters, and response codes.

oauth 19
GET
/oauth/app/{appName}
Process an Oauth2 redirect request from an access request for an app installation, storing the accessToken and refreshToken as secrets for the app
handleRedirect 4 params → 400404
POST
/oauth/credentials
Return a ChartHop authorization token, given a username and password
issueAccessTokenFromCredentials body → 200400
POST
/oauth/join
Return a JOIN token to be used for new user operations
join → 200
POST
/oauth/loginWithToken
Return a ChartHop authorization token, given a login token
issueAccessTokenFromLoginToken 1 param → 200400
POST
/oauth/mcp/approve
Approve an MCP authorization grant and issue an authorization code
approveMcpGrant body → 200400403404
GET
/oauth/mcp/grant-info
Describe a pending MCP authorization grant
getMcpGrantInfo 3 params → 200400403404
GET
/oauth/org/{orgIdentifier}/app/{appName}/{appUserId}
Retrieve the oauth uri the user should be directed to in order to start the oauth flow
getOauthConnectUri 6 params → 200400403404
GET
/oauth/org/{orgIdentifier}/app/{appUserId}/oauth/connection
Whether the app installation has an active org-level OAuth connection
getAppOauthConnection 2 params → 200403404
GET
/oauth/org/{orgIdentifier}/app/{appUserId}/oauth/user
List the per-user OAuth connections for an app installation
listAppOauthUserConnections 2 params → 200403404
DELETE
/oauth/org/{orgIdentifier}/app/{appUserId}/oauth/user
Revoke one or more per-user OAuth connections for an app installation
revokeAppOauthTokens 2 params body → 403404
POST
/oauth/revoke
Delete the current Oauth2 bearer token (for signout)
revokeToken body → 200
POST
/oauth/sendLoginToken
Send a login ("magic link") email
sendLoginToken body → 204
GET
/oauth/sso/{idp}/access-token
Exchange a one-time use Auth Code for the IDP access token response
getIdpAccessTokenResponse 2 params → 200400404
GET
/oauth/sso/{idp}/login
Login via the auth endpoint
ssoAuthLogin 1 param → 400404
POST
/oauth/token
Return an Oauth2 Authorization bearer token
issueAccessToken body → 200400
DELETE
/oauth/token
Delete the current Oauth2 bearer token (for signout)
deleteToken → 204401
POST
/oauth/token/attenuate
Given an existing token, issue a new token with a reduced set of scopes
attenuateToken 1 param → 200
POST
/oauth/token/sso/{type}
Return an Oauth2 Authorization bearer token, given a SSO id token
issueSsoToken 5 params body → 200400
POST
/oauth/token/view
Return a view-as token
issueViewToken body → 200400

Schemas 10

The contract defines 10 schemas that model the data the API accepts and returns. The most detailed are McpApproveRequest (7 properties), AccessTokenRequest (7 properties), AccessTokenResponse (6 properties), ViewAsRequest (5 properties). Each schema is shown below with its type and property counts.

AppOauthConnectionStatus
object
3 properties 1 required
ViewAsRequest
object
5 properties 2 required
AccessTokenResponse
object
6 properties 2 required
IdpAccessTokenResponse
object
1 property 1 required
RevokeAppOauthTokensRequest
object
1 property 1 required
McpApproveRequest
object
7 properties 5 required
AppOauthUserConnection
object
4 properties 3 required
EmailRequest
object
1 property 1 required
ConnectUriResponse
object
1 property 1 required
AccessTokenRequest
object
7 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

charthop-oauth-api-openapi.yml Raw ↑

Other APIs Charthop publishes across the network.

Charthop access API
Charthop action API
Charthop ai API
Charthop ai-credit-limit API
Charthop ai-hint API
Charthop ai-prompt API
Charthop app API
Charthop appConfig API
Charthop approval API
Charthop approval-delegate API
Charthop approval-request API
Charthop assessment API
Where this information came from

This is an independent, third-party profile of Charthop oauth API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.