---
title: "Registers a new client application."
method: POST
path: "/clientapplications"
tags: ["clientApplications"]
---

# Registers a new client application.

`POST /clientapplications`

<Check title="Required Permissions" icon="key">The user must be an admin or have `workspace-manage-config:write` permissions.</Check>

## Headers

- `Authorization` string, required

## Request body

- ClientApplicationCreateForm — The client application is required for the OAuth flow.
  - `clientId` string, nullable — The client application's identifier.
  - `displayName` string, nullable — The client application's display name.
  - `redirectUris` string[], nullable — The redirect URIs.
  - `isConfidential` boolean — Indicates whether the client application is confidential. Backend integrations are considered confidential as the secret is never shipped to a user, while web apps or CLI integrations are not.

## Response `200`

OK

- ClientApplicationCreateResponse — The client application is required for the OAuth flow.
  - `clientId` string, nullable — The client application's identifier.
  - `displayName` string, nullable — The client application's display name.
  - `redirectUris` string[], nullable — The redirect URIs.
  - `isConfidential` boolean — Indicates whether the client application is confidential. Backend integrations are considered confidential as the secret is never shipped to a user, while web apps or CLI integrations are not.
  - `clientSecret` string, nullable — The client application's secret.
  - `createdOn` string, date-time — The date this entity was created.
  - `updatedOn` string, date-time — The date this entity was last modified.

## Other responses

- `400` — Bad Request

---

[API](https://skmtc.net/awork-io/apis/api-v1-reference.md) · [All operations](https://skmtc.net/awork-io/apis/api-v1-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/awork-io/api-v1-reference/versions/f784a53f60df/schema)