All examples

Spine Explorer

OAuth + MCP
Spine Explorer preview

A vanilla-JS, no-build Surface that runs the full OAuth 2.1 + PKCE flow, exchanges the code for a scoped rxm_ token, then calls tools/list and tools/call on mcp.rexium.ai. It shows exactly which actions a given set of scopes unlocks — the clearest way to understand the security model: an app can only ever read or do what you grant it.

Stack
Vanilla JSNo build
Scopes
meta:read-orgcommerce:read-products

How to run

  1. 1Register a public (PKCE) app at /build/apps; add the redirect URI shown in the app.
  2. 2Open examples/rexium-surface-explorer/index.html (or deploy it).
  3. 3Paste the Client ID + Org ID, pick scopes, and Connect.
  4. 4Browse the granted tools and run a read tool to see live data.
View live demo examples/rexium-surface-explorer