Dynamic Client Registration (RFC 7591)

curl -X POST https://qa.creha.co/api/v5/rest/auth/oauth2/register \
     -H "Secret-Access: Secret-Access" \
     -H "Api-Key: <apiKey>" \
     -H "Content-Type: application/json" \
     -d '{
  "redirect_uris": [
    "http://127.0.0.1/callback"
  ],
  "token_endpoint_auth_method": "none",
  "grant_types": [
    "authorization_code",
    "refresh_token"
  ],
  "response_types": [
    "code"
  ],
  "client_name": "Claude Code",
  "scope": "openid profile api-v5:read"
}'

{
  "client_id": "s6BhdRkqt3",
  "redirect_uris": [
    "http://127.0.0.1/callback"
  ],
  "client_id_issued_at": 1924905600,
  "grant_types": [
    "authorization_code",
    "refresh_token"
  ],
  "response_types": [
    "code"
  ],
  "token_endpoint_auth_method": "none",
  "scope": "openid profile api-v5:read",
  "client_name": "Claude Code"
}

Registers an OAuth client. Accepts an application/json body (the only OAuth endpoint that reads JSON). Registration is public but restricted: public clients only, loopback/HTTPS redirect URIs and a scope allowlist, returning invalid_client_metadata / invalid_redirect_uri on violations.

Authentication

Api-Keystring

API key of the organization. Always sent together with the Secret-Access header.

Request

This endpoint expects an object.

redirect_urislist of stringsRequired

Client redirect URIs

token_endpoint_auth_methodstringOptionalDefaults to none

Client authentication method at the token endpoint

grant_typeslist of stringsOptional

Grant types the client will use

response_typeslist of stringsOptional

Response types the client will use

client_namestringOptional

Human-readable client name

scopestringOptional

Space-separated requested scopes

Response

Successful Response

client_idstring

redirect_urislist of strings

client_id_issued_atintegerOptional

grant_typeslist of stringsOptional

response_typeslist of stringsOptional

token_endpoint_auth_methodstringOptional

scopestringOptional

client_namestringOptional

client_secretstringOptional

Errors

400

Bad Request Error

422

Unprocessable Entity Error

Authentication

Headers

Request

Response

Errors