---
title: "Dynamically register an OAuth client (RFC 7591)"
method: POST
path: "/api/auth/oauth2/register"
tags: ["oauth"]
---

# Dynamically register an OAuth client (RFC 7591)

`POST /api/auth/oauth2/register`

Anonymous dynamic client registration. Public clients using PKCE should set token_endpoint_auth_method to none.

## Request body

- ClientRegistrationRequest
  - `client_name` string
  - `redirect_uris` string[], required
  - `grant_types` string[]
  - `token_endpoint_auth_method` 'none' | 'client_secret_basic' | 'client_secret_post'
  - `scope` string

## Response `201`

Registered client metadata including client_id.

- ClientRegistrationResponse
  - `client_id` string, required
  - `client_secret` string
  - `client_name` string
  - `redirect_uris` string[]
  - `grant_types` string[]
  - `token_endpoint_auth_method` string

## Other responses

- `400` — Invalid client metadata.

---

[API](https://skmtc.dev/superset/apis/superset-api.md) · [All operations](https://skmtc.dev/superset/apis/superset-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/superset/superset-api/revisions/dee6e20fae0d/schema)