Resource Servers

AdminUpdated Sep 11, 2026

Backend API — secret key (Authorization: Bearer sk_…).

5 routes. Each row is one endpoint with its explanation, required scope, and whether it honours the Idempotency-Key header.

Method & path	Scope	Explanation
`GET /v1/resource_servers`	`resource_servers:read`	List resource servers (machine-to-machine APIs) and their scopes.
`POST /v1/resource_servers`	`resource_servers:write`	Register a resource server (API): its audience identifier, scopes and token TTL.
`GET /v1/resource_servers/:id`	`resource_servers:read`	Fetch one resource server. Another instance id is 404, never 403.
`PATCH /v1/resource_servers/:id`	`resource_servers:write`	Update a resource server. The identifier (audience) is immutable.
`DELETE /v1/resource_servers/:id`	`resource_servers:write`	Delete a resource server; its client grants cascade with it.

Was this page helpful?