> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tickable.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Authorize

> Start the OAuth2 authorization code flow. Redirects back to `redirect_uri` with a `code` and `state` parameter.



## OpenAPI

````yaml get /oauth2/authorize
openapi: 3.0.0
info:
  version: 1.0.0
  title: Tickable API
  description: >-
    The Tickable API provides programmatic access to events, orders, tickets,
    and webhooks for your organization.
  contact:
    name: Tickable
    url: https://tickable.nl
servers:
  - url: https://api.tickable.io
    description: Production
security:
  - Bearer: []
tags:
  - name: Events
    description: Manage events
  - name: Tickets
    description: View tickets
  - name: Orders
    description: View orders
  - name: Webhooks
    description: Manage webhook subscriptions
  - name: User
    description: Current user information
  - name: OAuth
    description: OAuth2 authorization and token endpoints
paths:
  /oauth2/authorize:
    get:
      tags:
        - OAuth
      summary: Authorize
      description: >-
        Start the OAuth2 authorization code flow. Redirects back to
        `redirect_uri` with a `code` and `state` parameter.
      operationId: authorize
      parameters:
        - schema:
            type: string
            example: code
          required: true
          name: response_type
          in: query
        - schema:
            type: string
            example: your-client-id
          required: true
          name: client_id
          in: query
        - schema:
            type: string
            example: https://app.example.com/callback
          required: true
          name: redirect_uri
          in: query
        - schema:
            type: string
            example: events.read webhooks.read
          required: false
          name: scope
          in: query
        - schema:
            type: string
            minLength: 1
            example: random-state-value
            description: >-
              CSRF protection value — must be validated by the client on
              callback
          required: true
          description: CSRF protection value — must be validated by the client on callback
          name: state
          in: query
        - schema:
            type: string
            description: Supabase JWT token
          required: true
          description: Supabase JWT token
          name: token
          in: query
        - schema:
            type: string
            description: Organization to authorize for
          required: true
          description: Organization to authorize for
          name: organization_id
          in: query
      responses:
        '302':
          description: Redirect to redirect_uri with authorization code
        '400':
          description: Invalid request
      security: []
components:
  securitySchemes:
    Bearer:
      type: http
      scheme: bearer
      description: >-
        Pass as `Authorization: Bearer {token}`. Accepts either an OAuth2 JWT
        access token or an API key (`tk_live_...`) created from the Tickable
        dashboard.

````