---
title: "Get an OAuth application"
method: GET
path: "/organizations/{organization}/oauth-applications/{application_id}"
tags: ["OAuth applications"]
---

# Get an OAuth application

`GET /organizations/{organization}/oauth-applications/{application_id}`

### Authorization
A service token   must have at least one of the following access   in order to use this API endpoint:

**Service Token Accesses**
 `read_oauth_applications`

## Path parameters

- `organization` string, required
- `application_id` string, required

## Response `200`

Returns information abuot an OAuth application

- object
  - `id` string, required — The ID of the app
  - `name` string, required — The name of the app
  - `redirect_uri` string, required — The redirect URI of the OAuth application
  - `domain` string, required — The domain of the OAuth application. Used for verification of a valid redirect uri
  - `created_at` string, required — When the OAuth application was created
  - `updated_at` string, required — When the OAuth application was last updated
  - `scopes` string, required — The scopes that the OAuth application requires on a user account, as a space-separated string
  - `avatar` string, required — The image source for the OAuth application's avatar
  - `client_id` string, required — The OAuth application's unique client id
  - `tokens` integer, required — The number of tokens issued by the OAuth application
  - `dcr` boolean, required — Whether the OAuth application was created via Dynamic Client Registration
  - `single_org_authorization` boolean, required — Whether the OAuth application is limited to authorizing a single organization
  - `requires_org_scope` boolean, required — Whether the OAuth application requires at least one organization to be authorized
  - `scopes_by_resource` object, required — Scopes grouped by resource type (database, organization, branch, user) with scope, description, and admin flag
  - `all_scopes_by_resource` object, required — All available scopes grouped by resource type with scope, description, selected, and admin flags
  - `mcp_tool_groups` object[], nullable — MCP tool groups (id, label, section, tools, scopes, parent_id, default_enabled, roles) selectable when authorizing a DCR app; only present for DCR apps. Database-section groups also carry org_scopes (the organization-tier scope names granting the group across all databases in an organization) and org_roles (the organization roles allowed to grant them); both are null for organization-section groups

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `500` — Internal Server Error

## Changes

- **2026-08-28** `6d28c038c4fd` — 1 info
  - added the optional property `mcp_tool_groups` to the response with the `200` status
- **2026-07-08** `fa19f3305241` — 1 info
  - added the required property `requires_org_scope` to the response with the `200` status
- **2026-06-01** `72506953f367` — 1 breaking
  - the `scopes` response's property type/format changed from `array`/`` to `string`/`` for status `200`
- **2026-02-26** `2946c6c949b4` — 1 info
  - added the required property `single_org_authorization` to the response with the `200` status
- **2026-02-10** `ed1825db11c6` — 3 info
  - added the required property `all_scopes_by_resource` to the response with the `200` status
  - added the required property `dcr` to the response with the `200` status
  - added the required property `scopes_by_resource` to the response with the `200` status

[Change history](https://skmtc.dev/planetscale/apis/planetscale-api/changes/organizations/:organization/oauth-applications/:application_id/get.md)

---

[API](https://skmtc.dev/planetscale/apis/planetscale-api.md) · [All operations](https://skmtc.dev/planetscale/apis/planetscale-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/planetscale/planetscale-api/revisions/6d28c038c4fd/schema)