Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Register and manage OAuth 2.0 clients for MCP servers
ezforge_managed auth, client applications must register as OAuth clients before they can request tokens. This follows RFC 7591 (Dynamic Client Registration).
Required scope: Session authentication only.
GET /v1/servers/:serverId/clients
200:
{
"data": [
{
"id": "oac_abc123",
"clientId": "client_xyz...",
"name": "My MCP Client",
"redirectUris": ["https://myapp.example.com/callback"],
"scopes": ["mcp:read"],
"isDynamic": false,
"createdAt": "2026-01-15T10:00:00Z"
}
]
}
POST /v1/servers/:serverId/clients
{
"name": "My MCP Client",
"redirectUris": ["https://myapp.example.com/callback"],
"scopes": ["mcp:read"]
}
| Field | Type | Required | Description |
|---|---|---|---|
name | string | ✓ | Human-readable client name (max 255 chars) |
redirectUris | string[] | ✓ | One or more redirect URIs. Must use https except for loopback addresses (localhost, 127.0.0.1, [::1]). No fragment component (RFC 6749 §3.1.2). Max 20 entries. |
scopes | string[] | — | Requested scopes. Defaults to ["mcp:read"] if omitted. |
201:
{
"data": {
"id": "oac_abc123",
"clientId": "client_xyz...",
"clientSecret": "secret_...",
"name": "My MCP Client",
"redirectUris": ["https://myapp.example.com/callback"],
"scopes": ["mcp:read"],
"isDynamic": false,
"createdAt": "2026-01-15T10:00:00Z"
}
}
clientSecret is only returned once at registration time. Store it securely — it cannot be retrieved again.DELETE /v1/servers/:serverId/clients/:clientId
204: No content.