Informations
- License: MIT
- OpenAPI version:
3.1.0
REST API for the mor note store. All listing endpoints return paginated results and share a common filter surface (tag, type, repo, ext).
When --token is configured on the server, every route outside the
OAuth discovery endpoints requires authentication via either a bearer
token or an OAuth access token obtained through the MCP-spec OAuth
flow.
Static passphrase configured via --token. Sent as
Authorization: Bearer <passphrase>.
Security scheme type: http
Alternative to the bearer header. Sent as ?token=<passphrase>.
Security scheme type: apiKey
Query parameter name: token
MCP-spec OAuth 2.0 flow with PKCE. Clients discover metadata at
/.well-known/oauth-authorization-server and register dynamically
at /oauth/register.
Security scheme type: oauth2
Flow type: authorizationCode
Authorization URL: /oauth/authorize
Token URL: /oauth/token
Refresh URL: /oauth/token