---
title: "List accessible OAuth clients"
method: POST
path: "/oauthClients.list"
tags: ["OAuthClients"]
---

# List accessible OAuth clients

`POST /oauthClients.list`

## Request

- Base URL: `https://app.getoutline.com/api`
- URL: `https://app.getoutline.com/api/oauthClients.list`
- Auth: one of:
  - HTTP bearer
  - OAuth 2
    - Authorization code: `https://app.getoutline.com/oauth/authorize`
    - Token URL: `https://app.getoutline.com/oauth/token` scopes: `read`, `write`

List all OAuth clients that the authenticated user has access to. This includes both clients created by the user and published clients available to the workspace.

## Request body

- Pagination
  - `offset` number
  - `limit` number

## Response `200`

OK

- object
  - `data` OAuthClient[]
    - `id` string, uuid: Unique identifier for the object.
    - `name` string: The name of this OAuth client.
    - `description` string, nullable: A short description of this OAuth client.
    - `developerName` string, nullable: The name of the developer who created this OAuth client.
    - `developerUrl` string, nullable: The URL of the developer who created this OAuth client.
    - `avatarUrl` string, nullable: A URL pointing to an image representing the OAuth client.
    - `clientId` string: The client ID for the OAuth client.
    - `clientSecret` string: The client secret for the OAuth client. Only returned when the request is authenticated with a credential whose scope permits managing OAuth clients.
    - `clientType` 'public' | 'confidential': The type of the OAuth client.
    - `redirectUris` string[]: The redirect URIs for the OAuth client.
    - `published` boolean: Whether the OAuth client is available to other workspaces.
    - `lastActiveAt` string, date-time, nullable: Date and time when this OAuth client was last used.
    - `createdAt` string, date-time: Date and time when this OAuth client was created
    - `updatedAt` string, date-time: Date and time when this OAuth client was updated
  - `policies` Policy[]
    - `id` string, uuid: Unique identifier for the object this policy references.
    - `abilities` object: The abilities that are allowed by this policy, if an array is returned then the individual ID's in the array represent the memberships that grant the ability.
  - `pagination` Pagination
    - `offset` number
    - `limit` number

## Other responses

- `401`: The API key is missing or otherwise invalid.
- `403`: The current API key is not authorized to perform this action.
- `429`: The request was rate limited.

## Changes

- **2026-05-30** `304cd065561b`: 4 breaking, 2 info
  - the response property `data/items/avatarUrl` became nullable for the status `200`
  - the response property `data/items/description` became nullable for the status `200`
  - the response property `data/items/developerName` became nullable for the status `200`
  - the response property `data/items/developerUrl` became nullable for the status `200`
  - …2 more
- **2026-02-22** `cfd047380fae`: 1 breaking, 6 info
  - the response's body type changed from no type to `object` for status `200`
  - added optional request body
  - removed `#/components/schemas/Pagination, #/components/schemas/Sorting, subschema #3` from the response body `allOf` list for the response status `200`
  - removed the non-success response with the status `404`
  - …3 more
- **2026-02-01** `2b998aa571f9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/defaulr/apis/outline-api/changes/oauthClients.list/post.md)

---

[API](https://skmtc.dev/defaulr/apis/outline-api.md) - [All operations](https://skmtc.dev/defaulr/apis/outline-api/llms.txt) - [OpenAPI document](https://skmtc.dev/defaulr/apis/outline-api/revisions/5ddf01ffba84?raw)