Skip to content
Adversarial

POST /oauth/register (RFC 7591)

POST
/oauth/register

Request Body required

Section titled “Request Body required ”

RFC 7591 Client Registration Request (relevant subset for this server).

object
client_name
required
string
grant_types

Must include authorization_code if present; defaults apply when absent.

array | null
redirect_uris
required
Array<string>
response_types
array | null
scope

Required scope set. Compound scopes (mcp, mcp:full) are accepted and stored as-is; expansion happens at authorize time.

string | null
software_id
string | null
software_version
string | null
token_endpoint_auth_method

Token endpoint authentication method for this client. Supported values are none, client_secret_post, and client_secret_basic.

string | null

Responses

Section titled “ Responses ”

201

Section titled “201 ”

Client registered

RFC 7591 Client Registration Response.

object
client_id
required
string
client_id_issued_at
required
integer format: int64
client_name
required
string
client_secret
string | null
grant_types
required
Array<string>
redirect_uris
required
Array<string>
response_types
required
Array<string>
scope
string | null
software_id
string | null
software_version
string | null
token_endpoint_auth_method
required
string

400

Section titled “400 ”

Invalid registration

403

Section titled “403 ”

Dynamic client registration is disabled