v10

latestOpenAPI 3.0.0raw.githubusercontent.com2026-07-0582185581.9 KB

OAuth Apps

Get OAuth app details

Returns the full configuration of an OAuth app you registered. The clientSecret is never echoed back here; if you need a new one, call POST /oauth-clients/{appId}/regenerate-secret.

Access is creator-scoped: even org admins receive 404 for apps owned by other users. This avoids leaking app metadata across org members and keeps the read surface symmetric with listOAuthApps.

get/oauth-clients/{appId}

Path parameters

appIdstring required

OAuth app ID (MongoDB ObjectId)

Response

OAuth app details

idstring required

App ID

slugstring required

URL-friendly app slug

clientIdstring required

OAuth client ID

namestring required

App name

descriptionstring

App description

redirectUrisstring[] required

Allowed redirect URIs (always returned; may be empty)

allowedGrantTypesstring[] required

Allowed grant types

allowedScopesstring[] required

Allowed scopes

status'active' | 'suspended' | 'revoked' required

App status

homepageUrlstring uri

App homepage

privacyPolicyUrlstring uri

termsOfServiceUrlstring uri

isConfidentialboolean required

Whether app is a confidential client

accessTokenLifetimeinteger required

Access token lifetime in seconds

refreshTokenLifetimeinteger required

Refresh token lifetime in seconds

createdAtstring date-time required

Creation timestamp

updatedAtstring date-time required

Last update timestamp