---
title: "Dynamic client registration"
method: POST
path: "/oauth/register"
tags: ["OAuth"]
---

# Dynamic client registration

`POST /oauth/register`

## Request

- Base URL: `https://xn--s7y.xn--3ds443g`
- URL: `https://xn--s7y.xn--3ds443g/oauth/register`
- Auth: none required

RFC 7591 subset for public clients. `redirect_uris` is required and must be non-empty. Each URI is https, or http on localhost / 127.0.0.1, with no userinfo and no fragment. `token_endpoint_auth_method` must be omitted or `none`. No client secret is issued. The same handler is mounted at `/en/oauth/register` and `/zh-cn/oauth/register`. Rate-limited per IP (429 `rate_limited`). Errors are OAuth JSON, not problem+json.

## Request body

- OAuthClientRegistrationRequest
  - `client_name` string
  - `redirect_uris` string[], required
  - `token_endpoint_auth_method` 'none'

## Response `201`

Client registered

- OAuthClientRegistrationResponse
  - `client_id` string, required
  - `client_name` string
  - `redirect_uris` string[], required
  - `token_endpoint_auth_method` 'none', required
  - `grant_types` string[], required
  - `response_types` string[], required

## Other responses

- `400`: invalid_client_metadata or invalid_redirect_uri
- `429`: rate_limited
- `500`: server_error

---

[API](https://skmtc.dev/xn--s7y/apis/agent-api.md) · [All operations](https://skmtc.dev/xn--s7y/apis/agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xn--s7y/apis/agent-api/revisions/d902f68518e9?raw)