OAuth · Register client (RFC 7591) | Modular DS

RFC 7591 dynamic client registration. Answers 201 with the client document.

Unauthenticated and throttled to 10 requests/min per IP. redirect_uris must match an allowed domain or custom scheme from config/mcp.php — anything else is rejected.

Registered clients are public (PKCE S256, no secret) and own no user. Tokenless registrations older than 30 days are swept by mcp:prune-oauth-clients.

Host root, no /api prefix.

RFC 7591 dynamic client registration. Answers **201** with the client document. Unauthenticated and throttled to 10 requests/min per IP. `redirect_uris` must match an allowed domain or custom scheme from `config/mcp.php` — anything else is rejected. Registered clients are public (PKCE S256, no secret) and own no user. Tokenless registrations older than 30 days are swept by `mcp:prune-oauth-clients`. Host root, no `/api` prefix.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Request

This endpoint expects an object.

client_namestringRequired

redirect_urislist of stringsRequired

Response

Created

scopestring

client_idstringformat: "uuid"

grant_typeslist of strings

redirect_urislist of strings

response_typeslist of strings

token_endpoint_auth_methodstring

1	curl -X POST https://https//https/oauth/register \
2	-H "Authorization: Bearer <token>" \
3	-H "Content-Type: application/json" \
4	-d '{
5	"client_name": "Claude",
6	"redirect_uris": [
7	"https://https//claude.ai/api/mcp/auth_callback"
8	]
9	}'

1	{
2	"scope": "mcp:use",
3	"client_id": "9d7f2c1e-4b3a-4f8e-9c2d-1a5b6e7f8a90",
4	"grant_types": [
5	"authorization_code",
6	"refresh_token"
7	],
8	"redirect_uris": [
9	"https://claude.ai/api/mcp/auth_callback"
10	],
11	"response_types": [
12	"code"
13	],
14	"token_endpoint_auth_method": "none"
15	}