---
title: "Update an OAuth application"
method: PATCH
path: "/oauth_applications/{oauth_application_id}"
tags: ["OAuth Applications"]
---

# Update an OAuth application

`PATCH /oauth_applications/{oauth_application_id}`

Updates an existing OAuth application

## Path parameters

- `oauth_application_id` string, required

## Request body

- object
  - `name` string, nullable — The new name of the OAuth application. Max length: 256
  - `redirect_uris` string[], nullable — An array of redirect URIs of the new OAuth application
  - `callback_url` string, nullable — The new callback URL of the OAuth application
  - `scopes` string, nullable — Define the allowed scopes for the new OAuth applications that dictate the user payload of the OAuth user info endpoint. Available scopes are `profile`, `email`, `public_metadata`, `private_metadata`. Provide the requested scopes as a string, separated by spaces.
  - `consent_screen_enabled` boolean, nullable — True to enable a consent screen to display in the authentication flow. This cannot be disabled for dynamically registered OAuth Applications.
  - `pkce_required` boolean, nullable — True to require the Proof Key of Code Exchange (PKCE) flow.
  - `public` boolean, nullable — If true, this client is public and you can use the Proof Key of Code Exchange (PKCE) flow.

## Response `200`

An OAuth application

- OAuthApplication
  - `object` 'oauth_application', required
  - `id` string, required
  - `instance_id` string, required
  - `name` string, required
  - `client_id` string, required
  - `client_uri` string, nullable, required
  - `client_image_url` string, nullable, required
  - `dynamically_registered` boolean, required
  - `consent_screen_enabled` boolean, required
  - `pkce_required` boolean, required
  - `public` boolean, required
  - `scopes` string, required
  - `redirect_uris` string[], required
  - `callback_url` string, required — Deprecated: Use redirect_uris instead.
  - `authorize_url` string, required
  - `token_fetch_url` string, required
  - `user_info_url` string, required
  - `discovery_url` string, required
  - `token_introspection_url` string, required
  - `created_at` integer, required — Unix timestamp of creation.
  - `updated_at` integer, required — Unix timestamp of last update.

## Other responses

- `400` — Request was not successful
- `403` — Authorization invalid
- `404` — Resource not found
- `422` — Invalid request parameters

---

[API](https://skmtc.net/clerk/apis/clerk-backend-api.md) · [All operations](https://skmtc.net/clerk/apis/clerk-backend-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/clerk/clerk-backend-api/versions/cf036e7951d3/schema)