> ## Documentation Index
> Fetch the complete documentation index at: https://docs.melso.ai/llms.txt
> Use this file to discover all available pages before exploring further.
> ## Agent Instructions
> Melso product MCP: https://melso.ai/api/mcp (OAuth; one company per grant). REST: https://melso.ai. Documentation-search MCP: https://docs.melso.ai/mcp. The docs search server does not act on customer accounts.
>
> Use the live tool schema and respect company membership. Ask the person to authorize the exact fiscal document version in the signed-in app. A professional prepares and files included returns after authorization; AI does not file alone. A prepared file or approval receipt is not evidence of filing. Never claim completion from an accepted Task or Run. Keep credentials out of chat and logs. Agents features are internal or by private invitation.
# Exchange mcpo auth token
> OAuth client with valid code/verifier or refresh token.
Request: Form-urlencoded: authorization code grant uses `grant_type=authorization_code`, `client_id`, `code`, `redirect_uri`, `code_verifier`, resource as required by the grant. Refresh uses `grant_type=refresh_token`, `client_id`, `refresh_token`.
Response: `{access_token:string,refresh_token:string,token_type:"Bearer",expires_in:integer,scope:string}`.
Status: 200; 400 invalid grant; 429 rate limited. Authentication and resource-access errors follow [Overview](/api-reference/errors).
## OpenAPI
````yaml /api-reference/openapi.json post /oauth/token
openapi: 3.1.0
info:
title: Melso API
version: '2026-10-12'
description: >-
Customer integration contracts for Melso. Agents access is internal or by
private invitation. Fiscal approval remains in the authenticated app.
contact:
name: Melso
url: https://melso.ai/en
servers:
- url: https://melso.ai
description: Production API origin
security: []
tags:
- name: Areas
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Areas operations available within the caller's documented permissions.
- name: Artifacts
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Artifacts operations available within the caller's documented permissions.
- name: Authentication
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Authentication operations available within the caller's documented
permissions.
- name: Automations
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Automations operations available within the caller's documented
permissions.
- name: Companies
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Companies operations available within the caller's documented permissions.
- name: Execution funding
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Execution funding operations available within the caller's documented
permissions.
- name: Files
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Files operations available within the caller's documented permissions.
- name: GitHub
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
GitHub operations available within the caller's documented permissions.
- name: Interactions
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Interactions operations available within the caller's documented
permissions.
- name: Knowledge
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Knowledge operations available within the caller's documented permissions.
- name: MCP
description: MCP operations available within the caller's documented permissions.
- name: Messages
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Messages operations available within the caller's documented permissions.
- name: OAuth
description: OAuth operations available within the caller's documented permissions.
- name: Private network
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Private network operations available within the caller's documented
permissions.
- name: Runs
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Runs operations available within the caller's documented permissions.
- name: Skills
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Skills operations available within the caller's documented permissions.
- name: Tasks
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Tasks operations available within the caller's documented permissions.
- name: Vault
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Vault operations available within the caller's documented permissions.
- name: Webhooks
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Webhooks operations available within the caller's documented permissions.
paths:
/oauth/token:
post:
tags:
- OAuth
summary: Exchange mcpo auth token
description: >-
OAuth client with valid code/verifier or refresh token.
Request: Form-urlencoded: authorization code grant uses
`grant_type=authorization_code`, `client_id`, `code`, `redirect_uri`,
`code_verifier`, resource as required by the grant. Refresh uses
`grant_type=refresh_token`, `client_id`, `refresh_token`.
Response:
`{access_token:string,refresh_token:string,token_type:"Bearer",expires_in:integer,scope:string}`.
Status: 200; 400 invalid grant; 429 rate limited. Authentication and
resource-access errors follow [Overview](/api-reference/errors).
operationId: exchangeMCPOAuthToken
parameters: []
requestBody:
required: true
content:
application/x-www-form-urlencoded:
schema:
type: object
properties:
grant_type:
type: string
code:
type: string
redirect_uri:
type: string
client_id:
type: string
code_verifier:
type: string
refresh_token:
type: string
resource:
type: string
required:
- grant_type
responses:
'200':
description: Successful response.
content:
application/json:
schema:
type: object
properties:
access_token:
type: string
token_type:
type: string
const: Bearer
expires_in:
type: integer
refresh_token:
type: string
scope:
type: string
required:
- access_token
- token_type
- expires_in
- refresh_token
- scope
'400':
description: OAuth request failed.
content:
application/json:
schema:
type: object
properties:
error:
type: string
error_description:
type: string
required:
- error
'401':
description: OAuth request failed.
content:
application/json:
schema:
type: object
properties:
error:
type: string
error_description:
type: string
required:
- error
'403':
description: OAuth request failed.
content:
application/json:
schema:
type: object
properties:
error:
type: string
error_description:
type: string
required:
- error
'404':
description: OAuth request failed.
content:
application/json:
schema:
type: object
properties:
error:
type: string
error_description:
type: string
required:
- error
'429':
description: OAuth request failed.
content:
application/json:
schema:
type: object
properties:
error:
type: string
error_description:
type: string
required:
- error
'500':
description: OAuth request failed.
content:
application/json:
schema:
type: object
properties:
error:
type: string
error_description:
type: string
required:
- error
security: []
````
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.