OAuth Clients

postApprove MCP Client

Grants a dynamically registered client permission to hold the auth:mcp scope and drive the MCP endpoint, or revokes that permission. Only clients created by dynamic registration can be approved. Approval also pins the client to the MCP scope allowlist. **Required scopes:** `auth:clients:edit`

postCreate Client

Creates a new OAuth client with the specified configuration. The client secret will be returned only in this response if has_secret is true. **Required scopes:** `auth:clients:edit`

postDelete Client

Permanently deletes an OAuth client and revokes all associated tokens and authorisations. **Required scopes:** `auth:clients:edit`

postGet Client

Retrieves the full details of an OAuth client by its client ID. Optionally includes the client secret if include_secret is set. **Required scopes:** `auth:clients:read`

postGet Public Clients

Retrieves publicly visible information about one or more OAuth clients by their client IDs. Returns basic details like name, logo, and verification status. **Authentication:** None required

postList Clients

Returns a list of all OAuth clients. Optionally filter by application ID. **Required scopes:** `auth:clients:read`

postRegenerate Client Secret

Generates a new client secret for an OAuth client. The old secret will be immediately invalidated. **Required scopes:** `auth:clients:edit`

postUpdate Client

Updates an existing OAuth client's configuration. Use update_mask to specify which fields to update. **Required scopes:** `auth:clients:edit`

postUpload Client Logo

Uploads a logo image for an OAuth client. Supported formats: PNG, JPEG, WebP, GIF. Maximum size: 2MB, 512x512 pixels. **Required scopes:** `auth:clients:edit`