Skip to main content
POST
Register a client

Body

application/json

RFC 7591 client metadata. All fields optional except redirect_uris for authorization-code clients.

client_name
string
redirect_uris
string<uri>[]

Absolute HTTPS URIs (loopback HTTP allowed); no fragments.

logo_uri
string<uri>
client_uri
string<uri>
contacts
string[]
grant_types
enum<string>[]
Available options:
authorization_code,
refresh_token,
client_credentials
response_types
enum<string>[]
Available options:
code
scope
string

Space-delimited capability scopes (whitelist-validated).

token_endpoint_auth_method
enum<string>
Available options:
none,
client_secret_basic,
client_secret_post

Response

Client registered.

RFC 7591/7592 client information response.

client_id
string
required
client_id_issued_at
integer
registration_access_token
string

Returned only on registration.

registration_client_uri
string<uri>
redirect_uris
string<uri>[]
grant_types
string[]
response_types
string[]
token_endpoint_auth_method
string
scope
string
client_name
string
logo_uri
string<uri>
client_uri
string<uri>
contacts
string[]
client_secret
string

Confidential clients only; returned once at registration.

client_secret_expires_at
integer