Post Oauth 2 Create Client | MVS Developer Docs

curl -X POST https://c-auth.mvscloud.com/api/auth/oauth2/create-client \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "redirect_uris": [
    "string"
  ]
}'

{
  "client_id": "string",
  "client_secret": "string",
  "client_secret_expires_at": 1.1,
  "scope": "string",
  "user_id": "string",
  "client_id_issued_at": 1.1,
  "client_name": "string",
  "client_uri": "string",
  "logo_uri": "string",
  "contacts": [
    "string"
  ],
  "tos_uri": "string",
  "policy_uri": "string",
  "software_id": "string",
  "software_version": "string",
  "software_statement": "string",
  "redirect_uris": [
    "string"
  ],
  "token_endpoint_auth_method": "none",
  "grant_types": [
    "authorization_code"
  ],
  "response_types": [
    "code"
  ],
  "public": true,
  "type": "web",
  "disabled": true,
  "metadata": {}
}

Not the supported registration path. Dynamic client registration is gated (allowDynamicClientRegistration: false); unauthenticated calls are rejected. Register clients via POST /api/auth/admin/oauth-clients (admin session or Initial Access Token) — see the self-service registration guide.

**Not the supported registration path.** Dynamic client registration is gated (`allowDynamicClientRegistration: false`); unauthenticated calls are rejected. Register clients via `POST /api/auth/admin/oauth-clients` (admin session or Initial Access Token) — see the self-service registration guide. Register an OAuth2 application

Authentication

AuthorizationBearer

Bearer token authentication

Request

This endpoint expects an object.

redirect_urislist of anyRequired

scopestring or nullOptional

client_namestring or nullOptional

client_uristring or nullOptional

logo_uristring or nullOptional

contactslist of any or nullOptional

tos_uristring or nullOptional

policy_uristring or nullOptional

software_idstring or nullOptional

software_versionstring or nullOptional

software_statementstring or nullOptional

post_logout_redirect_urislist of any or nullOptional

backchannel_logout_uristring or nullOptional

backchannel_logout_session_requiredboolean or nullOptional

token_endpoint_auth_methodstring or nullOptionalDefaults to client_secret_basic

jwksstring or nullOptional

jwks_uristring or nullOptional

grant_typeslist of any or nullOptionalDefaults to ["authorization_code"]

response_typeslist of any or nullOptionalDefaults to ["code"]

typestring or nullOptional

Response

OAuth2 application registered successfully

client_idstring

Unique identifier for the client

client_secretstringOptional

Secret key for the client

client_secret_expires_atdoubleOptional

Time the client secret will expire. If 0, the client secret will never expire.

scopestringOptional

Space-separated scopes allowed by the client

user_idstringOptional

ID of the user who registered the client, null if registered anonymously

client_id_issued_atdoubleOptional

Creation timestamp of this client

client_namestringOptional

Name of the OAuth2 application

client_uristringOptional

URI of the OAuth2 application

logo_uristringOptional

Icon URI for the application

contactslist of stringsOptional

List representing ways to contact people responsible for this client, typically email addresses

tos_uristringOptional

Client's terms of service uri

policy_uristringOptional

Client's policy uri

software_idstringOptional

Unique identifier assigned by the developer to help in the dynamic registration process

software_versionstringOptional

Version identifier for the software_id

software_statementstringOptional

JWT containing metadata values about the client software as claims

redirect_urislist of stringsOptional

List of allowed redirect uris

token_endpoint_auth_methodenumOptional

Response types the client may use

Allowed values:

grant_typeslist of enumsOptional

Requested authentication method for the token endpoint

Allowed values:

response_typeslist of enumsOptional

Requested authentication method for the token endpoint

Allowed values:

publicbooleanOptional

Whether the client is public as determined by the type

typeenumOptional

Type of the client

Allowed values:

disabledbooleanOptional

Whether the client is disabled

metadatamap from strings to any or nullOptional

Additional metadata for the application

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

429

Too Many Requests Error

500

Internal Server Error