Short-lived OAuth authorization code exchanged for tokens. The code is stored as a hash. Actor info is kept to recreate the session on exchange.
VendureEntitystringHash of the authorization code. The raw code is never stored and is deleted after use.
McpOauthClientIDIDMcpGrantUserTypestringstringTarget endpoint (issuer + /mcp/admin or /mcp/shop).
Must match during token exchange.
ID | nullstringDateArchitecture reviews, custom plugin work, migrations, ongoing support. Get a hand from the team that builds Vendure.