OAuth App Registrations

Update an OAuth app registration

Changed on

Update mutable fields on a registration.

client_id is immutable (would orphan every dependent credential) — use :rotate-secret for the client secret.

patch/oauth-app-registrations/{id}

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /oauth-app-registrations/{id}
  • Auth: one of:
    • HTTP bearer
    • OAuth 2 (authorization code, authorization URL /authorize, token URL /oauth/token)

Path parameters

idstring required

ID of the OAuth app registration.

Example:oar_6968b39821e5f89a6975f501

Request body

authorization_endpointstring nullable

New device authorization endpoint URL; device-authorization registrations only.

authorize_urlstring nullable

New authorization endpoint URL; authorization-code registrations only.

default_scopesstring[] nullable

Replacement default scopes; omit to leave unchanged.

display_namestring nullable

New vendor family label; omit to leave unchanged.

is_activeboolean nullable

Activate or deactivate the registration; omit to leave unchanged.

namestring nullable

New registration name; omit to leave unchanged.

token_endpointstring nullable

New token endpoint URL; device-authorization registrations only.

token_urlstring nullable

New token endpoint URL; authorization-code registrations only.

Example request

{
  "authorization_endpoint": "https://github.com/login/device/code",
  "authorize_url": "https://github.com/login/oauth/authorize",
  "default_scopes": [
    "repo",
    "read:user"
  ],
  "display_name": "GitHub",
  "is_active": true,
  "name": "MyOrg GitHub",
  "token_endpoint": "https://github.com/login/oauth/access_token",
  "token_url": "https://github.com/login/oauth/access_token"
}

Response

Successful Response

api_vendorstring required

Vendor registry key the registration connects.

authorization_endpointstring nullable

Device authorization endpoint URL; null for authorization-code registrations.

authorize_urlstring nullable

Authorization endpoint URL; null for device-authorization registrations.

catalog_api_idstring required

Catalog API slug this OAuth app targets (e.g. 'googleapis-com/gmail'). Feeds credential.catalog_api_id at connect time so the operations preview resolves against a real registered API.

client_idstring required

OAuth client ID of the app.

created_atstring date-time required

When the registration was created (RFC 3339).

created_bystring nullable required

ID of the actor that created the registration.

default_scopesstring[] nullable

Scopes requested by default; null if none are set.

dependent_credential_countinteger required

Number of credentials minted through this registration.

display_namestring required

Vendor family label ('Gmail'), shown alongside the admin's per-registration 'name' on the picker card.

flow_kind'authorization_code' | 'device_authorization' required

Which OAuth flow a registration supports.

has_client_secretboolean required

Whether a client secret is stored.

idstring required

Unique ID of the OAuth app registration.

is_activeboolean required

Whether the registration is active.

namestring required

Admin-chosen name of the registration.

secret_last_rotated_atstring date-time nullable required

When the client secret was last rotated (RFC 3339); null if never rotated.

token_endpointstring nullable

Token endpoint URL; null for authorization-code registrations.

token_urlstring nullable

Token endpoint URL; null for device-authorization registrations.

updated_atstring date-time required

When the registration was last updated (RFC 3339).

Example response

{
  "api_vendor": "github",
  "authorization_endpoint": "https://github.com/login/device/code",
  "authorize_url": "https://github.com/login/oauth/authorize",
  "catalog_api_id": "github.com/api.github.com",
  "client_id": "Iv1.a1b2c3d4",
  "created_at": "2026-01-15T09:30:00Z",
  "created_by": "usr_6968b3987ee4c3ec0b4ee3b9",
  "default_scopes": [
    "repo",
    "read:user"
  ],
  "dependent_credential_count": 4,
  "display_name": "GitHub",
  "flow_kind": "authorization_code",
  "has_client_secret": true,
  "id": "oar_6968b39821e5f89a6975f501",
  "is_active": true,
  "name": "MyOrg GitHub",
  "secret_last_rotated_at": "2026-01-20T14:05:00Z",
  "token_endpoint": "https://github.com/login/oauth/access_token",
  "token_url": "https://github.com/login/oauth/access_token",
  "updated_at": "2026-01-20T14:05:00Z"
}

Changes