---
title: "Get an auth server client"
method: GET
path: "/v1/auth-servers/{authServerId}/clients/{clientId}"
tags: ["Auth Server Clients"]
---

# Get an auth server client

`GET /v1/auth-servers/{authServerId}/clients/{clientId}`

Get a client for given auth server.

## Response `200`

A client

- Client
  - `id` string, required — The OAuth 2.0 client ID
  - `name` string, required — The name of the client
  - `grant_types` GrantType[], required — List of OAuth 2.0 grant types
  - `redirect_uris` string[], required — The URIs that the client is allowed to redirect to after authentication in interactive flows. All redirect URIs must be absolute URIs, be secure (HTTPS), and must not include a fragment component.
  - `login_uri` string, uri, nullable — The URI of the login page where the user is redirected to authenticate in interactive flows. The login page must be secure (HTTPS).
  - `access_token_duration` integer, required — The duration of the minted token is valid for, in seconds
  - `id_token_duration` integer, required — The duration of the minted token is valid for, in seconds
  - `refresh_token_duration` integer, required — The duration of the minted refresh token is valid for, in seconds
  - `allow_all_scopes` boolean, required — Specifies whether the client is allowed to request all scopes
  - `allow_scopes` string[], required — Specifies the scopes IDs that the client is allowed to request
  - `labels` Labels, required — Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types. Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
  - `response_types` ResponseType[], required — List of OAuth 2.0 response types
  - `token_endpoint_auth_method` 'client_secret_post' | 'none' — Requested authentication method for OAuth 2.0 endpoints.
  - `created_at` string, date-time, required — An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required — An ISO-8601 timestamp representation of entity update date.

## Other responses

- `404` — Not Found

## Changes

- **2026-03-04** `e425d5193d3e` — 1 warning, 1 info
  - added the new `refresh_token` enum value to the `grant_types/items/` response property for the response status `200`
  - added the required property `refresh_token_duration` to the response with the `200` status
- **2026-02-16** `106b373707f3` — 1 breaking
  - the response property `login_uri` became optional for the status `200`
- **2025-10-02** `ecce2daf9de6` — 1 info
  - added the optional property `token_endpoint_auth_method` to the response with the `200` status
- **2025-08-12** `b2800570b3e2` — 2 info
  - api tag `Auth Server Clients` added
  - api tag `authserver` removed
- **2025-06-05** `a0a9c5c8afa2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/kong/apis/konnect-api-beta/changes/v1/auth-servers/:authServerId/clients/:clientId/get.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-beta.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-beta/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kong/konnect-api-beta/revisions/658ffb748f95/schema)