Validates the submitted Virtual Key and links it to the pending flow as the user’s identity. On success, redirects to the MCPs page. On failure, redirects back to the identity page with an error message.
Request body is application/x-www-form-urlencoded (browser form submission).
Bearer token authentication. Use your provider API key or Bifrost authentication token.
Virtual keys (prefixed with sk-bf-) can also be passed here.
Redirect to /oauth/consent/mcps?flow_id=xxx on success, or back to
/oauth/consent?flow_id=xxx&error=... on failure.