OAuth · Register client (RFC 7591) | Modular DS

RFC 7591 dynamic client registration. Answers 201 with the client document.

Unauthenticated and throttled to 10 requests/min per IP. redirect_uris must match an allowed domain or custom scheme from config/mcp.php — anything else is rejected.

Registered clients are public (PKCE S256, no secret) and own no user. Tokenless registrations older than 30 days are swept by mcp:prune-oauth-clients.

Host root, no /api prefix.

RFC 7591 dynamic client registration. Answers **201** with the client document. Unauthenticated and throttled to 10 requests/min per IP. `redirect_uris` must match an allowed domain or custom scheme from `config/mcp.php` — anything else is rejected. Registered clients are public (PKCE S256, no secret) and own no user. Tokenless registrations older than 30 days are swept by `mcp:prune-oauth-clients`. Host root, no `/api` prefix.

Request

This endpoint expects an object.

client_namestringOptional

redirect_urislist of stringsOptional

Response

201 Created

client_idstringOptional

grant_typeslist of stringsOptional

redirect_urislist of stringsOptional

response_typeslist of stringsOptional

scopestringOptional

token_endpoint_auth_methodstringOptional