Authentication

Create OAuth2 client

Registers a new OAuth2 client. Requires clientName and redirectUris (HTTPS only, max 5, localhost allowed). Returns auto-generated clientId and clientSecret (secret shown only once).

post/auth/oauth/client

Request

  • Base URL: https://test.boost.space/api
  • URL: https://test.boost.space/api/auth/oauth/client
  • Auth: HTTP bearer

Request body

clientNamestring required

Client application name

redirectUrisstring[] required

Allowed redirect URIs (HTTPS required except localhost, max 5)

scopestring

Space-delimited scopes per RFC 7591, e.g. 'user:read todo:write'

grantTypesstring[]

Defaults to both if not provided

Response

OAuth2 client created

idinteger

Unique identifier - primary key

createdstring date-time

Creation timestamp

createdUserIdinteger

ID of user who created this record

updatedstring date-time

Last update timestamp

updatedUserIdinteger

ID of user who last updated this record

clientIdstring

Publicly known OAuth2 client identifier used in authorization and token requests

clientNamestring

Human-readable display name of the OAuth2 application

redirectUrisstring[]

Permitted redirect URIs that the authorization server will send the auth code to

scopesstring[]

OAuth2 scopes this client is authorized to request

tokenIdinteger

ID of the MCP API token linked to this OAuth2 client for machine-to-machine access

Example response

{
  "id": 42,
  "created": "2026-01-15T09:30:00Z",
  "createdUserId": 42,
  "updated": "2026-01-15T09:30:00Z",
  "updatedUserId": 42,
  "clientId": "string",
  "clientName": "Sample clientName",
  "redirectUris": [
    "https://acme.boost.space"
  ],
  "scopes": [
    "string"
  ],
  "tokenId": 42
}

Changes

No recorded changes to this operation across all 1 revision of this API.