POST Exchange an authorization code for an MCP access token

{
  "access_token": "demo",
  "expires_in": 0,
  "scope": "demo",
  "token_type": "demo"
}

{
  "code": "demo",
  "detail": "Demo error detail; inspect the documented code.",
  "instance": "demo",
  "message": "Demo error detail; inspect the documented code.",
  "message_key": "errors.requestFailed",
  "message_params": {},
  "request_id": "00000000000000000000000000000000",
  "status": 400,
  "title": "Demo error",
  "type": "about:blank"
}

{
  "code": "demo",
  "detail": "Demo error detail; inspect the documented code.",
  "instance": "demo",
  "message": "Demo error detail; inspect the documented code.",
  "message_key": "errors.requestFailed",
  "message_params": {},
  "request_id": "00000000000000000000000000000000",
  "status": 429,
  "title": "Demo error",
  "type": "about:blank"
}

{
  "code": "demo",
  "detail": "Demo error detail; inspect the documented code.",
  "instance": "demo",
  "message": "Demo error detail; inspect the documented code.",
  "message_key": "errors.requestFailed",
  "message_params": {},
  "request_id": "00000000000000000000000000000000",
  "status": 503,
  "title": "Demo error",
  "type": "about:blank"
}

curl --silent --show-error --output /dev/null --write-out "%{http_code}\n" \
  --request POST \
  --header "Content-Type: application/x-www-form-urlencoded" \
  --data-binary 'client_id=demo&code=demoxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&code_verifier=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fexample.com%2Fcallback&resource=https%3A%2F%2Fmetribeacon.com%2Fmcp' \
  "https://metribeacon.com/oauth/token"

import json
from pathlib import Path
from urllib.request import Request, HTTPRedirectHandler, build_opener
from urllib.error import HTTPError

headers = {}
headers["Content-Type"] = "application/x-www-form-urlencoded"
request = Request("https://metribeacon.com/oauth/token", data="client_id=demo&code=demoxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&code_verifier=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fexample.com%2Fcallback&resource=https%3A%2F%2Fmetribeacon.com%2Fmcp".encode("utf-8"), headers=headers, method="POST")
class NoRedirect(HTTPRedirectHandler):
    def redirect_request(self, request, fp, code, message, headers, target):
        return None

opener = build_opener(NoRedirect())
try:
    with opener.open(request, timeout=10) as response:
        print(response.status)
except HTTPError as error:
    print(error.code)
    error.close()

import { readFile } from "node:fs/promises";
import { homedir } from "node:os";
import { join } from "node:path";

const headers = {};
headers["Content-Type"] = "application/x-www-form-urlencoded";
const response = await fetch("https://metribeacon.com/oauth/token", {
  method: "POST", headers, redirect: "manual",
  signal: AbortSignal.timeout(10000), body: "client_id=demo&code=demoxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&code_verifier=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fexample.com%2Fcallback&resource=https%3A%2F%2Fmetribeacon.com%2Fmcp",
});
console.log(response.status);
await response.body?.cancel();

package main

import (
  "fmt"
  "net/http"
  "time"
  "strings"
)

func main() {
  request, err := http.NewRequest("POST", "https://metribeacon.com/oauth/token", strings.NewReader("client_id=demo&code=demoxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&code_verifier=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fexample.com%2Fcallback&resource=https%3A%2F%2Fmetribeacon.com%2Fmcp"))
  if err != nil { panic("request failed; credentials and response omitted") }
  request.Header.Set("Content-Type", "application/x-www-form-urlencoded")
  client := &http.Client{Timeout: 10*time.Second, CheckRedirect: func(*http.Request, []*http.Request) error { return http.ErrUseLastResponse }}
  response, err := client.Do(request)
  if err != nil { panic("request failed; credentials and response omitted") }
  defer response.Body.Close()
  fmt.Println(response.StatusCode)
}