// Implements SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage. Use when adding login, obtaining tokens, or fixing 401 auth errors.
Implements SoundCloud discovery endpoints — track search, related tracks, and related artists — with URN path parameters and linked_partitioning pagination. Use when building recommendations, “similar” features, or search UIs.
Integrates applications with the SoundCloud HTTP API using OAuth 2.1, OpenAPI, and developer docs. Use when building SoundCloud API clients, auth flows, uploads, playback, pagination, or debugging API errors.
| name | soundcloud-api-auth |
| description | Implements SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage. Use when adding login, obtaining tokens, or fixing 401 auth errors. |
| Purpose | Host |
|---|---|
| Authorize user | https://secure.soundcloud.com/authorize |
| Token exchange / refresh | https://secure.soundcloud.com/oauth/token |
Do not use https://api.soundcloud.com/oauth2/token (deprecated).
Use for /me, uploads, and private user actions.
code_verifier (43–128 chars) and code_challenge = BASE64URL(SHA256(verifier))response_type=code, client_id, redirect_uri, code_challenge, code_challenge_method=S256, statecode at token endpoint with grant_type=authorization_code, code_verifier, redirect_uriaccess_token, refresh_token, expires_in securely (server-side or httpOnly cookie — never in client-visible storage for secrets)curl -X POST "https://secure.soundcloud.com/oauth/token" \
-H "Content-Type: application/x-www-form-urlencoded" \
-H "Authorization: Basic BASE64_CLIENT_ID_SECRET" \
--data-urlencode "grant_type=client_credentials"
curl -X POST "https://secure.soundcloud.com/oauth/token" \
-H "Content-Type: application/x-www-form-urlencoded" \
--data-urlencode "grant_type=refresh_token" \
--data-urlencode "refresh_token=REFRESH_TOKEN" \
--data-urlencode "client_id=CLIENT_ID" \
--data-urlencode "client_secret=CLIENT_SECRET"
After refresh, discard the old refresh token; the response includes a new one.
client_credentials — cache access token and refresh insteadFull flow details: https://developers.soundcloud.com/docs/api/guide#authentication