Skip to main content
OAuth endpoints are documented in prose under Endpoints and Authentication. For machine-readable schemas, request bodies, and response shapes, use the OpenAPI 3.1 spec:
Import it into Postman, Insomnia, or your codegen tool of choice. The spec covers:
  • Authorization (GET /auth/consent)
  • Token exchange and refresh (POST /api/oauth/token)
  • Userinfo (GET /api/oauth/userinfo)
  • Revoke (POST /api/oauth/revoke)
  • Scope definitions and response schemas
Prefer https://api.meridian.surf/openapi.json as the canonical URL. Older docs may still mention docs-backend.meridian.surf; that host is retired.
Last modified on August 9, 2026