Developer applications
Developer applications are OIDC clients owned by the current account. The account portal provides a friendly API; OIDC-style dynamic registration is also available. Both require an account-portal audience access token.
Account portal routes
| Method | Route |
|---|---|
| GET, POST | /api/v1/me/developer-apps |
| GET, PUT, DELETE | /api/v1/me/developer-apps/{client_id} |
Create requests require client_name and one to twenty redirect_uris. Optional metadata includes scopes, client_uri, logo_uri, tos_uri, policy_uri, and up to twenty post_logout_redirect_uris.
Dynamic registration routes
| Method | Route |
|---|---|
| POST | /api/oauth2/register |
| GET, PUT, DELETE | /api/oauth2/register/{client_id} |
Server-managed fields such as client_id, client secret, grant types, response types, and token endpoint authentication method cannot be supplied through this owner API. Treat any returned client secret as write-only and store it securely.