hcalls OAuth 2.0

Authorize hcalls API access

This is the official authorization endpoint for the hcalls API. Agents and apps request least-privilege scopes, you approve them, and we return an authorization code (RFC 6749). Token exchange lives at /oauth/token.

Start an authorization-code request with PKCE. Example:

https://hcalls.com/oauth/authorize?response_type=code&client_id=hcalls-public&redirect_uri=https://hcalls.com/oauth/callback&scope=sessions:read%20resumes:read%20user:read&code_challenge=<S256>&code_challenge_method=S256

Discovery: /.well-known/oauth-authorization-server. Developer docs: /docs. Free self-serve signup (50 credits, no card) is at /login.