Skip to content

Overview

REST API for the mor note store. All listing endpoints return paginated results and share a common filter surface (tag, type, repo, ext).

When --token is configured on the server, every route outside the OAuth discovery endpoints requires authentication via either a bearer token or an OAuth access token obtained through the MCP-spec OAuth flow.

Informations

  • License: MIT
  • OpenAPI version: 3.1.0

Static passphrase configured via --token. Sent as Authorization: Bearer <passphrase>.

Security scheme type: http

Alternative to the bearer header. Sent as ?token=<passphrase>.

Security scheme type: apiKey

Query parameter name: token

MCP-spec OAuth 2.0 flow with PKCE. Clients discover metadata at /.well-known/oauth-authorization-server and register dynamically at /oauth/register.

Security scheme type: oauth2

Flow type: authorizationCode

Authorization URL: /oauth/authorize

Token URL: /oauth/token

Refresh URL: /oauth/token