---
title: "Create a new client secret"
method: POST
path: "/v1/auth-servers/{authServerId}/clients/{clientId}/secrets"
tags: ["Auth Server Clients"]
---

# Create a new client secret

`POST /v1/auth-servers/{authServerId}/clients/{clientId}/secrets`

Create a new client secret for a given client. Multiple secrets can be active simultaneously for a single client.

## Request body

- CreateSecretPayload
  - `secret` string — The OAuth 2.0 client secret
  - `enabled` boolean — Specifies whether the secret is enabled. If the secret is not enabled, it will not be usable during authentication phase.

## Response `201`

A Client Secret item

- ClientSecretItem — The client secret. The secret value is only returned when creating a new secret item.
  - `id` string, uuid, required — The ID of the client secret
  - `enabled` boolean, required — Specifies whether the secret is enabled. If the secret is not enabled, it will not be usable during authentication phase.
  - `secret` string — The OAuth 2.0 client secret
  - `created_at` string, date-time, required — An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time, required — An ISO-8601 timestamp representation of entity update date.

## Other responses

- `400` — Bad Request
- `403` — Forbidden

---

[API](https://skmtc.net/kong/apis/konnect-api-beta.md) · [All operations](https://skmtc.net/kong/apis/konnect-api-beta/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kong/konnect-api-beta/revisions/658ffb748f95/schema)