---
title: "connect OAuth using client credentials"
method: POST
path: "/w/{workspace}/oauth/connect_client_credentials/{client}"
tags: ["oauth"]
---

# connect OAuth using client credentials

`POST /w/{workspace}/oauth/connect_client_credentials/{client}`

## Path parameters

- `workspace` string, required
- `client` string, required

## Request body

- object
  - `scopes` string[]
  - `cc_client_id` string — OAuth client ID. Omit to use the credentials configured on the provider's instance OAuth entry.
  - `cc_client_secret` string — OAuth client secret. Omit to use the credentials configured on the provider's instance OAuth entry.
  - `cc_instance` string — Instance name for built-in providers whose client-credentials token URL is instance-templated; substituted into the fixed-host registry template server-side. The token URL is never caller-supplied.
  - `cc_token_url` string — Bring-your-own token endpoint override. Only honored together with cc_client_id/cc_client_secret and mutually exclusive with cc_instance; rejected on the shared-instance path.

## Response `200`

OAuth token response

- TokenResponse
  - `access_token` string, required
  - `expires_in` integer
  - `refresh_token` string
  - `scope` string[]
  - `grant_type` string

---

[API](https://skmtc.dev/windmill/apis/windmill-api.md) · [All operations](https://skmtc.dev/windmill/apis/windmill-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/windmill/windmill-api/revisions/7b281701c340/schema)