Create a PKCE-only public OAuth client through an operation-bound projection.

POST

/api/admin/agent-write/clients/public

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/agent-write/clients/public \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: example' \
  --data '{ "client_name": "example", "application_type": "spa", "redirect_uris": [ "https://example.com" ], "allowed_redirect_origins": [ "https://example.com" ], "scope": "example", "grant_types": [ "authorization_code" ], "response_types": [ "code" ], "token_endpoint_auth_method": "none", "require_pkce": true, "client_credentials_allowed": false, "token_exchange_allowed": false, "is_trusted": false, "skip_consent": false }'

The owner fixes the grant, response, authentication, trust, and delegation profile and never returns generated credential material.

Authorizations

• adminBearer

Parameters

Header Parameters

Idempotency-Key

required

string

>= 1 characters <= 256 characters

Request Body ^required

Media type application/json

object

client_name

required

string

>= 1 characters <= 200 characters

application_type

required

string

Allowed values: spa native

redirect_uris

required

Array<string>

>= 1 items <= 20 items unique items

allowed_redirect_origins

Array<string>

<= 20 items unique items

scope

string

>= 1 characters <= 1000 characters

grant_types

required

Array<string>

response_types

required

Array<string>

token_endpoint_auth_method

required

string

Allowed value: none

require_pkce

required

boolean

client_credentials_allowed

required

boolean

token_exchange_allowed

required

boolean

is_trusted

required

boolean

skip_consent

required

boolean

key

additional properties

Responses

201

Public client representation without credential material.

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

409

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

503

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}