Admin Clients

Admin-only OAuth client registry

📄️Create OAuth client

Registers an OAuth client. `redirect_uris` are exact matches, `implicit` and `password` grants are refused, and public clients must use PKCE. A confidential client's secret is generated and returned in the response. Admin only.

📄️List OAuth clients

Lists every client. `get_secret=true` includes each confidential client's secret, which is how a lost secret is recovered. Admin only.

📄️Update OAuth client

Replaces a client's editable fields; omitted fields reset to their defaults. `client_id`, `client_type` and the secret cannot change. Same validation as create. Admin only.

📄️Delete OAuth client

Deletes the client. It can no longer sign users in or get tokens; tokens already issued work until they expire. Admin only.