Backplane Docs

https://backplane.gsmlg.net

Backplane Docs

Public gateway references for MCP tools, model traffic, skills, agent setup, and authentication.

MCP hub

Connect ChatGPT and other MCP clients to Backplane's resource-bound tool gateway.

LLM proxy

Authorize API clients for Backplane's separate /v1 resource, then call model endpoints with a resource-bound bearer token.

Skills library

Serve, import, export, and browse reusable agent skills through the public Skills API and MCP tools.

Agent setup

Use the configured Backplane origin for ChatGPT, Claude Code, and Codex without embedding real credentials.

Authentication

Manage predefined OAuth clients and troubleshoot the separate MCP and LLM protected resources.

MCP hub

Open section

MCP hub

Connect ChatGPT and other MCP clients to Backplane's resource-bound tool gateway.

One protected MCP resource

https://backplane.gsmlg.net/mcp is the canonical Streamable HTTP endpoint. An unauthenticated request returns a WWW-Authenticate challenge that points to https://backplane.gsmlg.net/.well-known/oauth-protected-resource/mcp.

Scoped access

Assign the same MCP tool scopes to the predefined client and the signing-in user. Backplane exposes permitted tools with stable prefix::tool names.

Reference


                    POST /mcp


                    GET /mcp


                    DELETE /mcp


                    GET /.well-known/oauth-protected-resource/mcp

LLM proxy

Open section

LLM proxy

Authorize API clients for Backplane's separate /v1 resource, then call model endpoints with a resource-bound bearer token.

LLM scopes

Grant llm::models for model discovery and llm::invoke for inference operations. Request only the scopes the client and user share.

Existing credentials remain valid

Resource OAuth is additive compatibility: existing PAT and legacy bearer access continue under the deployment's configured authentication policy.

Reference


                    GET /v1


                    GET /v1/models


                    POST /v1/messages


                    POST /v1/chat/completions


                    POST /v1/responses


                    GET /.well-known/oauth-protected-resource/v1

Skills library

Open section

Skills library

Serve, import, export, and browse reusable agent skills through the public Skills API and MCP tools.

Skill archive routes

Use /skills to list or create records, /skills/export for a bundle, and /skills/:slug/archive for a single archive.

Managed service tools

The skills managed service exposes skill discovery and retrieval through MCP for connected agents.

Host-agent support

The host-agent socket can synchronize local skill and memory context with Backplane.

Reference


                    GET /skills


                    POST /skills


                    GET /skills/export


                    POST /skills/import


                    GET /skills/:slug


                    GET /skills/:slug/archive


                    DELETE /skills/:slug

Agent setup

Open section

Agent setup

Use the configured Backplane origin for ChatGPT, Claude Code, and Codex without embedding real credentials.

Keep endpoints distinct

MCP clients connect to https://backplane.gsmlg.net/mcp; model clients use https://backplane.gsmlg.net/v1. Resource-bound OAuth access tokens are audience-specific, so use separate $MCP_ACCESS_TOKEN and $LLM_ACCESS_TOKEN values. PAT and legacy credentials follow the configured compatibility policy.

Reference


                    ChatGPT


                    Claude Code


                    Codex


                    MCP /mcp


                    LLM API /v1

Authentication

Open section

Authentication

Manage predefined OAuth clients and troubleshoot the separate MCP and LLM protected resources.

Separate resource audiences

https://backplane.gsmlg.net/mcp and https://backplane.gsmlg.net/v1 are separate OAuth audiences. Resource-bound OAuth access tokens are audience-specific: a token issued for one resource is not valid for the other. PAT and legacy credentials follow the configured compatibility policy.

Predefined clients and PKCE

Use predefined OAuth clients. ChatGPT uses a confidential client with its exact registered callback and PKCE S256; the client secret is displayed only once.

Refresh and revocation

A refresh token request that omits resource inherits its original resource, supporting durable ChatGPT connectivity across reconnects. Revoke access at https://backplane.gsmlg.net/oauth/revoke.

HTTPS and troubleshooting

OAuth protected resources require HTTPS outside the explicit local development override. invalid_target means the requested resource is missing, repeated, unsupported, or disallowed; invalid_token means the bearer token is invalid or bound to the wrong audience; insufficient_scope means the valid token lacks the required operation scope.

Reference


                    GET /oauth/authorize


                    POST /oauth/token


                    POST /oauth/revoke


                    GET /.well-known/oauth-protected-resource/mcp


                    GET /.well-known/oauth-protected-resource/v1