Reference / Oauth Provider

Register a third-party OAuth client. Returns the client + its one-time secret (confidential only).

POST /v1/oauth/clients

Secret API key operationId: create_client

Authorization

Server-to-server. Send a secret key as a Bearer token plus the x-application-id header.

Request body · required

grant_types string[]
name string required
public boolean

A public client (SPA/native) holds no secret and must use PKCE.
redirect_uris string[] required

Exact-match redirect URI allowlist (at least one).
scopes string[]

Responses

201 Client registered

{
  "data": {
    "client_id": "string",
    "created_at": "2026-01-15T09:30:00Z",
    "grant_types": [
      "string"
    ],
    "id": "018f3c4a-7b2e-7c1d-9e0a-1f2b3c4d5e6f",
    "name": "string",
    "public": false,
    "redirect_uris": [
      "string"
    ],
    "scopes": [
      "string"
    ],
    "secret": "string"
  },
  "error": {
    "code": "string",
    "message": "string"
  },
  "meta": {
    "timestamp": "string"
  },
  "success": false
}

Request

curl -X POST "https://api.identrahq.com/v1/oauth/clients" \
  -H "Content-Type: application/json" \
  -d '{
  "grant_types": [
    "string"
  ],
  "name": "string",
  "public": false,
  "redirect_uris": [
    "string"
  ],
  "scopes": [
    "string"
  ]
}'

Try it

live request

POST https://api.identrahq.com/v1/oauth/clients

Request body

application/json