VolunteerReminder authentication
VolunteerReminder lets an AI assistant start a free trial, import a volunteer roster, and preview upcoming shifts. New accounts start in test mode — nothing texts a real volunteer until a human turns live sends on from the dashboard.
Machine-readable metadata: /auth.md. This page is the HTML twin.
Protected resource metadata
- Host-level (matches a scan of this origin):
/.well-known/oauth-protected-resource - REST v1:
/.well-known/oauth-protected-resource/api/v1 - MCP:
https://mcp.volunteerreminder.com/.well-known/oauth-protected-resource/mcp - Authorization server:
/.well-known/oauth-authorization-server
VolunteerReminder is the authorization server. There is no separate AS host.
OAuth Allow (Claude, ChatGPT, Grok)
- Add the connector URL
https://mcp.volunteerreminder.com(Streamable HTTP endpoint:https://mcp.volunteerreminder.com/mcp). - The client reads RFC 9728, then RFC 8414, and registers at
https://volunteerreminder.com/oauth/register. - The coordinator signs in at
https://volunteerreminder.com/oauth/authorize, then clicks Allow. - The client exchanges the code at
https://volunteerreminder.com/oauth/tokenfor avra_access token.
No vrk_ paste on this path.
API-key bearer (Cursor-style / scripts)
- Start a trial at /signup or with the
create_accountMCP tool. That tool does not return a key. - Mint a key at Account → Security.
- Send
Authorization: Bearer vrk_…on MCP and REST v1 calls.
What VolunteerReminder does not implement
- WorkOS agent-auth identity registration, ID-JAG, or claim ceremonies
- A second authorization server
- Live SMS from an agent. Import stays in test mode. A human turns live sends on from the dashboard.
Walkthrough: /docs/agents. Markdown: /auth.md.