> ## Documentation Index
> Fetch the complete documentation index at: https://ai.easyaf.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# OutboundGrantKind

> The OAuth 2.0 grant kinds outbound OAuth can select for a remote OData service.

## Definition

**Assembly:** Microsoft.OData.Mcp.Authentication.dll

**Namespace:** Microsoft.OData.Mcp.Authentication.Outbound

**Inheritance:** System.Enum

## Syntax

```csharp theme={null}
Microsoft.OData.Mcp.Authentication.Outbound.OutboundGrantKind
```

## Summary

The OAuth 2.0 grant kinds outbound OAuth can select for a remote OData service.

## Remarks

Per `AUTH-5` this is a top-level type; wire DTOs and grant-kind enums are never nested inside
another type. [OutboundGrantKind.RefreshToken](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/OutboundGrantKind.md#refreshtoken) is not one of the four values `--grant` accepts on the
command line (see [OutboundGrantKindParser](https://ai.easyaf.dev/odata-mcp/api-reference/Microsoft/OData/Mcp/Authentication/Outbound/OutboundGrantKindParser.md)) — it is only ever selected internally, once the
outbound auth handler already holds a cached refresh token.

## Values

| Name | Value | Description |
| - | - | - |
| `DeviceCode` | 0 | RFC 8628 device authorization grant, for input-constrained devices and interactive CLI sign-in. |
| `AuthorizationCode` | 1 | RFC 6749 authorization code grant with RFC 7636 PKCE, completed through a loopback redirect. |
| `ClientCredentials` | 2 | RFC 6749 client credentials grant, for a confidential client acting as itself. |
| `IdentityAssertion` | 3 | SDK identity assertion grant (RFC 7523 JWT bearer), exchanging an enterprise IdP id token for an |
| access token. | | |
| `RefreshToken` | 4 | RFC 6749 refresh token grant, used internally to renew an access token without re-prompting. |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.