Developer documentation

MCP with OAuth

OAuth is the recommended MCP credential when a person authorizes an IDE, coding agent, cowork tool, or third-party application.

Discover and authorize

The client reads AbuseZero protected-resource metadata and completes Authorization Code with PKCE for explicit Test or Live scopes.

Select an organization

Call abusezero_list_organizations, then abusezero_select_organization. AbuseZero stores selection only for the bounded MCP session and rechecks current membership on every tool call.

Recover an expired context

If a session expires, the tool returns ORGANIZATION_REQUIRED. Select the organization again; do not request a broader OAuth grant.