Authentication

Arlo uses OAuth 2.1 with PKCE. Claude, ChatGPT, and Grok connector interfaces handle the OAuth exchange. Agent runtimes can use OAuth or session-based bot authentication.

`init_signup`

Use this tool for a stdio or local client that connects before it has a bearer token. It returns an authUrl for the user to open in a browser.

Parameter	Type	Description
`baseUrl`	string	Optional base URL for callback links
`webhookUrl`	string	Optional public HTTPS endpoint for Arlo notifications
`webhookToken`	string	Optional bearer token for verifying webhook requests
`deliveryContext`	object	Optional routing context included in webhook payloads
`conversationSessionKey`	string	Optional key for threading notifications

The result includes authUrl, sessionId, expiresIn, and instructions. Use the sessionId with check_account_status to see when authentication completes.

Example response

{
    "authUrl": "https://example.com/auth",
    "sessionId": "session_example",
    "expiresIn": 900,
    "instructions": "Open authUrl in a browser, then check status with sessionId."
}

`check_account_status`

Pass sessionId to check authentication progress. The result can include authenticated, status (pending or complete), message, userName, and the checked sessionId. Without sessionId, the tool reports authentication and webhook configuration for the account. Webhook fields can include webhookConfigured, webhookUrl, webhookHint, and sessions.

Example response

{
    "authenticated": false,
    "status": "pending",
    "message": "Authentication is pending."
}

These two tools are hidden on connector hosts that manage authentication in their own interface.

OAuth discovery

The MCP server exposes:

Resource	Path
MCP Server Card	`/.well-known/mcp.json`
Protected Resource metadata	`/.well-known/oauth-protected-resource`
Authorization Server metadata	`/.well-known/oauth-authorization-server`

See the REST API introduction for the OAuth discovery endpoints.

Overview

Tools Reference

`init_signup`

Example response

`check_account_status`

Example response

OAuth discovery

​init_signup

​Example response

​check_account_status

​Example response

​OAuth discovery

`init_signup`

Example response

`check_account_status`

Example response

OAuth discovery