Register a public native MCP OAuth client

POST/oauth/register

Registers a client with HTTP loopback callback URIs. Registration grants no access. Authorization Code with S256 PKCE and explicit Workspace consent remain required. HTTPS web callbacks use reviewed registration instead. Client names are unverified. Optional extension metadata is ignored. This endpoint is advertised by OAuth authorization-server discovery.

Request Body

application/json

client_name

string·max 88

redirect_urisRequired

string <uri>[]·min 1·max 20

token_endpoint_auth_methodRequired

string

Values

none

application_type

string

Values

native

grant_types

string[]·max 2

Values

authorization_coderefresh_token

response_types

string[]·max 1

Values

code

scope

string

Space-separated supported MCP scopes, including additive assign:resource:read or assign:resource:write groups. Legacy broad scopes remain supported; grants and refresh never expand the approved scope set.

Responses

429Registration rate limit exceeded; respect Retry-After.

Authentication · Conventions and errors · API guides · Resource reference

Register a public native MCP OAuth client