GEgetsales
oauth_clients

Create OAuth client

Register an OAuth application: the server mints client_id; public PKCE clients, no secret. permissions is the ceiling a grant may request, inside the caller's own (403 scope_missing); redirect_uris the exact-match https allow-list. actor_kind: integration (default) or agent. platform true registers a platform client (no owning team, writable by a system actor only afterwards): leave it to provisioning. A name already live in the team is 409 duplicate_rejected, never already_exists.

Contract:

  • MCP tool create_oauth_client, registry package mcp.id/oauth_clients, mount id.access.
  • Operation create, response envelope create.
  • Flags: dangerous: the MCP layer gates it behind a preview/commit token, and the effect cannot be undone through this API.
post/api/oauth-clients

Request

  • Base URL
    https://beta.getsales.io/id/v1
  • Auth
    HTTP bearer and API key in header Team-SID

Request body

namestring required

The application's name, 1..255 chars.

redirect_urisstring[] required

Exact-match https callback allow-list, at least one entry.

permissionsstring[] required

The permission ceiling the client may request; may be empty.

grant_typesstring[]

Default: authorization_code and refresh_token.

actor_kind'agent' | 'integration'

integration (default for a hand-made client) or agent (tokens act for an autonomous caller).

platformboolean

A platform client with team_sid null, writable afterwards by a system actor only (403 platform_client_not_writable): leave it to provisioning.

Response

create success envelope.

successtrue required
operation'create' required
already_existsboolean required

Changes

No recorded changes to this operation across all 1 revision of this API.