API reference
Every endpoint of Sign in with Atheron, the developer API and the MCP server.
Sign in to see your own test client ID in the samples.
Sign in with Atheron is standard OpenID Connect, under https://accounts.aton-network.org. The developer API and the MCP server are under https://developers.aton-network.org. Read the discovery document rather than hard-coding addresses. The whole surface is also an OpenAPI document.
Sign in with Atheron (OpenID Connect)
| Endpoint | Method | Path | What it does |
|---|---|---|---|
| Discovery document | GET | /.well-known/openid-configuration | Where every other endpoint is, and what the provider supports: scopes, claims, grants, algorithms and client authentication methods. |
| Signing keys (JWKS) | GET | /.well-known/jwks.json | The public keys that sign ID tokens and access tokens, as a JSON Web Key Set. |
| Authorize | GET | /oauth/authorize | The page you send somebody to. They sign in, see what you ask for, and come back to your redirect address with a one-time code. |
| Token: swap a code | POST | /oauth/token | Swaps the code from the redirect for an ID token, an access token and, with offline_access, a refresh token. |
| Token: refresh | POST | /oauth/token | Swaps a refresh token for a new access token and a new refresh token. The old refresh token stops working. |
| Userinfo | GET, POST | /oauth/userinfo | Who the person is as of now: the claims their consent allows, read fresh from their account. |
| Revoke | POST | /oauth/revoke | Ends a refresh token and every token in its line. |
Developer API and MCP
| Endpoint | Method | Path | What it does |
|---|---|---|---|
| Developer API: your app | GET | /api/v1/app | The application and environment your API key belongs to: its client ID, redirect addresses, scopes, approved scopes and counts. |
| Developer API: usage | GET | /api/v1/usage | Calls, errors and latency per day and bucket for your key's environment. |
| Developer API: events stream | GET | /api/v1/events | Your app's events as Server-Sent Events, the same events and the same bodies as its webhooks, in order, resumable for 30 days. |
| MCP server | POST | /mcp | The Model Context Protocol server your AI tools connect to: the docs, the reference, examples by language, error lookup, the changelog, status, and, with a key, your app's settings, usage and sandbox calls. |
Client authentication at the token endpoint
| Method | How |
|---|---|
| client_secret_basic | HTTP Basic with client ID and secret (preferred) |
| client_secret_post | client_id and client_secret in the form |
| private_key_jwt | client_assertion_type and a client_assertion signed with your certificate's key; see Secrets and certificates |
| none | Public apps: client_id in the form, PKCE only |
Ask Atlas
AI assistantAsk anything about Sign in with Atheron, the API or the portal. You get an answer from our docs, with links to the pages it used.