v13

latestOpenAPI 3.0.3MITraw.githubusercontent.com2026-08-04237161688.6 KB

Instance Settings

Update OAuth application settings

Updates the OAuth application settings for the instance.

patch/instance/oauth_application_settings

Request body

dynamic_oauth_client_registrationboolean nullable

Whether dynamic OAuth client registration is enabled for the instance (RFC 7591).

default_scopesstring[] nullable

Default scopes. Set to null to reset to Clerk-provided defaults.

oauth_jwt_access_tokensboolean nullable

Whether OAuth JWT access tokens are enabled for the instance (disabled indicates opaque access tokens).

client_id_metadata_documents_advertisedboolean nullable

Whether the instance advertises support for Client ID Metadata Documents in its OAuth authorization server metadata.

client_id_metadata_documents_only_allow_pre_registered_clientsboolean nullable

When true, new unknown CIMD clients are rejected. Previously auto-connected and pre-registered clients remain admitted; deleting a client makes it unknown again.

client_id_metadata_documents_block_implicitly_allowed_clientsboolean nullable

When true, recorded implicitly allowed CIMD clients are rejected on future client lookups. Explicitly allowed clients remain accepted. This does not revoke previously issued access tokens.

Response

Success

object'oauth_application_settings' required

String representing the object's type. Objects of the same type share the same value.

dynamic_oauth_client_registrationboolean required

Whether dynamic OAuth client registration is enabled for the instance (RFC 7591).

default_scopesstring[] nullable required

Default scopes.

oauth_jwt_access_tokensboolean required

Whether OAuth JWT access tokens are enabled for the instance (disabled indicates opaque access tokens).

client_id_metadata_documents_advertisedboolean required

Whether the instance advertises support for Client ID Metadata Documents in its OAuth authorization server metadata.

client_id_metadata_documents_only_allow_pre_registered_clientsboolean required

When true, new unknown CIMD clients are rejected. Previously auto-connected and pre-registered clients remain admitted; deleting a client makes it unknown again.

client_id_metadata_documents_block_implicitly_allowed_clientsboolean required

When true, recorded implicitly allowed CIMD clients are rejected on future client lookups. Explicitly allowed clients remain accepted. This does not revoke previously issued access tokens.