Authentication: OAuth or API key
There are two ways to connect a client — pick what fits:
- OAuth 2.1 — for AI apps a human uses (Claude.ai, ChatGPT, Gemini). No key to paste: the client registers itself via Dynamic Client Registration, you sign in through the Kinexa SSO, then approve on Oprex's consent screen. Access tokens last 1 hour, refresh 30 days with rotation.
- API key — for CI/CD, scripts, and config-file clients (Claude Code, Cursor, VS Code, Gemini CLI). Tenant-owned, valid until revoked.
OAuth endpoints (if you want to inspect them yourself): /.well-known/oauth-authorization-server, /.well-known/oauth-protected-resource, /oauth/register, /oauth/authorize, /oauth/token, /oauth/revoke.
1. Create an API key
Open member.oprex.id/panel/settings/api-keys → create a key. Choose scope read (safe, read-only) or write. Copy the key oprex_pk_… — shown only once.
2. Pick your client
Once you have a key, follow the guide on the /mcp/clients page for Claude Code, Cursor, VS Code, Gemini, ChatGPT, Ollama, and more.
3. Verify the connection
After configuration, run claude mcp list (Claude Code) or open MCP settings in your IDE. You should see oprex-sdlc in the server list.