Dynamic client registration (RFC 7591)

Public clients only: token_endpoint_auth_method must be none (if present), grants only authorization_code. 1–10 HTTPS (or loopback http) redirect URIs without fragments/credentials. Registration is capped (429 at 1000 clients).

POST/oauth/register

Request body

requiredapplication/json

redirect_urisstring<uri>[]required

min items 1 · max items 10

client_namestring

max length 120

token_endpoint_auth_methodstring

Allowed:none

grant_typesstring[]

Responses

201

Client registered

client_idstring

client_id_issued_atinteger

client_namestring

redirect_urisstring[]

token_endpoint_auth_methodstring

grant_typesstring[]

response_typesstring[]

400

OAuth error JSON (invalid_request, invalid_client, invalid_grant, invalid_scope, invalid_target, invalid_redirect_uri, invalid_client_metadata, unsupported_grant_type)

errorstringrequired

Allowed:invalid_requestinvalid_clientinvalid_grantinvalid_scopeinvalid_targetinvalid_redirect_uriinvalid_client_metadataunsupported_grant_typeaccess_deniedtemporarily_unavailable

error_descriptionstringrequired

429

OAuth error JSON (temporarily_unavailable — registration/authorization caps reached)

errorstringrequired

Allowed:invalid_requestinvalid_clientinvalid_grantinvalid_scopeinvalid_targetinvalid_redirect_uriinvalid_client_metadataunsupported_grant_typeaccess_deniedtemporarily_unavailable

error_descriptionstringrequired

503

OAuth error JSON (temporarily_unavailable — credentials or storage not configured)

errorstringrequired

Allowed:invalid_requestinvalid_clientinvalid_grantinvalid_scopeinvalid_targetinvalid_redirect_uriinvalid_client_metadataunsupported_grant_typeaccess_deniedtemporarily_unavailable

error_descriptionstringrequired

Request

curl -X POST 'https://api.agentsub.dev/oauth/register' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "redirect_uris": [
    "http://example.com"
  ],
  "client_name": "string",
  "token_endpoint_auth_method": "none",
  "grant_types": [
    "authorization_code"
  ]
}'

const response = await fetch("https://api.agentsub.dev/oauth/register", {
  method: "POST",
  headers: {
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: "{\n  \"redirect_uris\": [\n    \"http://example.com\"\n  ],\n  \"client_name\": \"string\",\n  \"token_endpoint_auth_method\": \"none\",\n  \"grant_types\": [\n    \"authorization_code\"\n  ]\n}"
});

import requests

response = requests.post(
    "https://api.agentsub.dev/oauth/register",
    headers={
        "Accept": "application/json",
        "Content-Type": "application/json"
    },
    data="{\n  \"redirect_uris\": [\n    \"http://example.com\"\n  ],\n  \"client_name\": \"string\",\n  \"token_endpoint_auth_method\": \"none\",\n  \"grant_types\": [\n    \"authorization_code\"\n  ]\n}",
)

Response

{
  "client_id": "string",
  "client_id_issued_at": 0,
  "client_name": "string",
  "redirect_uris": [
    "string"
  ],
  "token_endpoint_auth_method": "none",
  "grant_types": [
    "authorization_code"
  ],
  "response_types": [
    "code"
  ]
}

{
  "error": "invalid_request",
  "error_description": "string"
}

{
  "error": "invalid_request",
  "error_description": "string"
}

{
  "error": "invalid_request",
  "error_description": "string"
}