---
title: "Get OAuth clients for a service account"
method: GET
path: "/orgs/{orgId}/service-accounts/{serviceAccountId}/oauth-clients"
tags: ["Service Account", "OAuth Client"]
---

# Get OAuth clients for a service account

`GET /orgs/{orgId}/service-accounts/{serviceAccountId}/oauth-clients`

## Request

- Base URL: `https://api.atlassian.com/admin/api-access/v1`
- URL: `https://api.atlassian.com/admin/api-access/v1/orgs/{orgId}/service-accounts/{serviceAccountId}/oauth-clients`
- Auth: none declared

Retrieves OAuth clients belonging to the specified service account.

#### Scopes
**[OAuth 2.0 scopes](/cloud/admin/scopes/) required:** `read:service-accounts-tokens:admin`

## Path parameters

- `orgId` string, required
- `serviceAccountId` string, required

## Query parameters

- `clientName` string

## Response `200`

Returned if the request is successful.

- ServiceAccountOAuthClient[]: List of OAuth clients for the service account.
  - `tokenEndpointAuthMethod` string, nullable: The token endpoint authentication method, for example `post` or `private_key_jwt`. Null for legacy clients whose authentication method has not yet been populated. Read responses do not include public keys, `keyId`, or `clientSecret`.
  - `clientId` string, required: The unique identifier of the OAuth client.
  - `clientName` string, required: The display name of the OAuth client.
  - `serviceAccount` TokenUser, required: The user associated with an API token or OAuth client.
    - `id` string, required: The Atlassian account ID of the user.
    - `name` string, required: The display name of the user.
    - `email` string, nullable: The email address of the user.
    - `appType` string, nullable: The application type associated with the user.
    - `orgId` string, nullable: The ID of the organization the user belongs to.
    - `userStatus` string, nullable: The status of the user.
  - `expiresAt` string, date-time, nullable: An ISO-8601 formatted timestamp representing when the OAuth client expires.
  - `createdAt` string, date-time, nullable: An ISO-8601 formatted timestamp representing when the OAuth client was created.
  - `createdBy` TokenUser: The user associated with an API token or OAuth client.
    - `id` string, required: The Atlassian account ID of the user.
    - `name` string, required: The display name of the user.
    - `email` string, nullable: The email address of the user.
    - `appType` string, nullable: The application type associated with the user.
    - `orgId` string, nullable: The ID of the organization the user belongs to.
    - `userStatus` string, nullable: The status of the user.
  - `clientRevokerId` string, nullable: The ID of the user that revoked the OAuth client.
  - `clientRevocationTime` string, date-time, nullable: An ISO-8601 formatted timestamp representing when the OAuth client was revoked.
  - `scopes` string[], required: Array of scopes associated with the OAuth client.

## Other responses

- `400`: Returned if request is not in correct format.
- `403`: Returned if the user does not have permission to view service account OAuth clients.
- `404`: Returned if the organization or service account is not found.
- `500`: Internal Error

## Changes

- **2026-10-08** `52842bc49df9`: 1 info
  - added the optional property `items/tokenEndpointAuthMethod` to the response with the `200` status
- **2026-09-19** `eb9c7a84b535`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/atlassian/apis/api-access/changes/orgs/:orgId/service-accounts/:serviceAccountId/oauth-clients/get.md)

---

[API](https://skmtc.dev/atlassian/apis/api-access.md) - [All operations](https://skmtc.dev/atlassian/apis/api-access/llms.txt) - [OpenAPI document](https://skmtc.dev/atlassian/apis/api-access/revisions/52842bc49df9?raw)