Query the current link status for a provider. CLI / MCP clients poll this after opening the authorize URL in the user's browser.
Authorization
BearerAuth Security scheme for OpenAPI endpoints. Validates both JWT tokens and API keys.
In: header
Path Parameters
Value in
- "azure"
- "gitHub"
- "google"
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/v1/auth/providers/azure/status"{ "linked": true, "linkedAt": "string", "providerEmail": "string"}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}{ "code": "string", "message": "string", "request_id": "string", "details": [ { "field": "string", "message": "string" } ]}Check which resource planes the caller's provider link is actually consented for.
Azure issues a token for **one resource per consent**, so a link can cover the control plane (browse storage accounts) without covering the data plane (read/write blobs) — the link itself looks fine and only fails later, at container registration. This endpoint answers which is which by *acquiring a token per plane*: the only authoritative signal available to us, since the provider never tells us what a stored grant is consented for. **Not for polling.** Each plane costs a token request to the provider and rotates the stored refresh token. Use `/status` to watch for a link completing; use this once afterwards, or when diagnosing a `provider_reauth_required`. **Required scope:** none beyond authentication — reports on the caller's own link.
Initiate SSO login
Next Page