When issuing an OAuthToken for someone/site to access your GET/POST/etc service, as a security measure, the OAuth protocol normally has your program return the token generated to a URL that the requestor has specified. I've enclosed a graphic that shows API documentation for a company I'm interacting with.
Thanks,
Mark
[attachment deleted by admin]