开始 MCP 账户授权

{
  "type": "object",
  "properties": {
    "client_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 2048,
      "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
      "description": "The client_id returned by dynamic registration, or the exact public HTTPS URL of the client metadata document."
    },
    "redirect_uri": {
      "type": "string",
      "minLength": 1,
      "maxLength": 2048,
      "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
      "description": "Must exactly match one of this client's registered redirect_uris."
    },
    "response_type": {
      "const": "code"
    },
    "response_mode": {
      "const": "query",
      "default": "query"
    },
    "code_challenge": {
      "type": "string",
      "minLength": 43,
      "maxLength": 43,
      "pattern": "^[A-Za-z0-9_-]{43}$",
      "description": "Base64url SHA-256 digest of the original code_verifier, without padding."
    },
    "code_challenge_method": {
      "const": "S256"
    },
    "resource": {
      "type": "string",
      "format": "uri",
      "description": "Required exact resource audience: use the resource value from this environment's protected-resource metadata. In production this is https://api.voicecheap.ai/mcp. A different origin, path, or trailing slash is rejected.",
      "examples": [
        "https://api.voicecheap.ai/mcp"
      ]
    },
    "scope": {
      "type": "string",
      "minLength": 1,
      "maxLength": 2048,
      "pattern": "^ *(?:account:read|usage:read|settings:read|settings:write|team:read|team:write|projects:read|projects:write|projects:delete|translations:write|transcription:read|transcription:write|subtitles:read|subtitles:write|tts:read|tts:write|voices:read|voices:write|images:read|images:write|thumbnails:read|thumbnails:write|folders:read|folders:write|glossary:read|glossary:write|webhooks:read|webhooks:write|publishing:read|publishing:write|offline_access|openid|email)(?: +(?:account:read|usage:read|settings:read|settings:write|team:read|team:write|projects:read|projects:write|projects:delete|translations:write|transcription:read|transcription:write|subtitles:read|subtitles:write|tts:read|tts:write|voices:read|voices:write|images:read|images:write|thumbnails:read|thumbnails:write|folders:read|folders:write|glossary:read|glossary:write|webhooks:read|webhooks:write|publishing:read|publishing:write|offline_access|openid|email))* *$",
      "description": "Space-delimited permissions from scopes_supported, optionally including offline_access. Unsupported names and whitespace-only values are rejected; duplicates are removed. Omitting scope or supplying no product scopes, such as openid alone or offline_access alone, selects the default read scopes intersected with this client's registered product scopes. email requires openid; email alone is rejected. Requested product permissions must be registered for this client. Identity permissions must be explicitly requested and approved by the user; omitting scope requests no identity permissions.",
      "examples": [
        "account:read projects:read offline_access"
      ]
    },
    "state": {
      "type": "string",
      "minLength": 1,
      "maxLength": 2048,
      "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
      "description": "Optional opaque value echoed on the final callback. Use a fresh unpredictable value and verify it in the client."
    },
    "nonce": {
      "type": "string",
      "minLength": 1,
      "maxLength": 2048,
      "pattern": "^[^\\u0000-\\u001F\\u007F]+$",
      "description": "Optional opaque nonce echoed in the ID token when openid is granted. Verify it in the client."
    },
    "prompt": {
      "type": "string",
      "const": "consent"
    }
  },
  "required": [
    "client_id",
    "redirect_uri",
    "response_type",
    "code_challenge",
    "code_challenge_method",
    "resource"
  ],
  "additionalProperties": true
}