API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Oauth Clients

AdminUpdated Sep 11, 2026

Oauth Clients

Dashboard API — authenticated by an Atlas console (platform-instance) session, not a key.

9 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.

Method & path

Idem

Explanation

GET /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/grants

List a client’s machine-to-machine grants.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/grants

Grant a confidential client client-credentials access to a resource server.

DELETE /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/grants/:grantId

Revoke a client’s machine-to-machine grant.

GET /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients

List registered "Sign in with Atlas" clients. The client secret is never re-revealed.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients

Register a "Sign in with Atlas" client. redirect_uris are validated as absolute https; the secret is revealed once (none for a public PKCE client).

PATCH /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId

Edit an OAuth client's name, redirect_uris, scopes, logo or auth method. Never changes the client_id or the secret.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/rotate_secret

Rotate a confidential client secret. The old secret stops working immediately.

DELETE /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId

Delete an OAuth client. Its authorization codes and grants cascade away with it.

GET /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/consents

The end-user consents (authorized users + scopes) granted to this OAuth client.

Was this page helpful?