# Fashion Frame auth.md

Use the existing remote MCP server: https://mcp.myfashionframe.com/mcp

Read the connection guide: https://myfashionframe.com/developers/mcp

1. Discover https://mcp.myfashionframe.com/.well-known/oauth-protected-resource.
2. Discover https://mcp.myfashionframe.com/.well-known/oauth-authorization-server.
3. Register an OAuth client at the advertised registration_endpoint with its exact redirect URI.
4. Use authorization_code with PKCE S256. Send the user to the advertised authorization_endpoint to sign in and approve scopes. Never collect the user's password in chat.
5. Exchange the authorization code at token_endpoint and use the returned bearer token for MCP requests. Store tokens securely.
6. Refresh using the refresh_token grant; revoke using the advertised revocation_endpoint or Settings > AI Assistants.

Available scopes: profile:read, wardrobe:read, outfits:read, outfits:write, tryon:read, tryon:create. Request only what the user needs.

This service requires an existing user's consent. It does not implement auth.md identity assertions, autonomous account registration, or anonymous wardrobe access. On 401 reconnect; on insufficient scope request renewed consent. Never broaden scopes silently.