SourceHut GraphQL APIs

In meta.sr.ht OAuth settings, create a personal access token with the minimum required scopes for the services you will call. SourceHut documents scope strings in OAuth 2.0 via meta.sr.ht and per-resolver requirements in each service's GraphQL schema docs on docs.sourcehut.org.

Register an OAuth 2.0 client at meta.sr.ht OAuth settings. SourceHut issues a client ID and client secret there. Then send the user through the authorization flow described in OAuth 2.0 via meta.sr.ht: authorize at https://meta.sr.ht/oauth2/authorize with an explicit scope, then exchange the code at https://meta.sr.ht/oauth2/access-token. SourceHut supports confidential clients only; the registered redirect URI is fixed and redirect_uri must not be sent per their docs.