GET /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/grants

List a client’s machine-to-machine grants.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/grants

Grant a confidential client client-credentials access to a resource server.

DELETE /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/grants/:grantId

Revoke a client’s machine-to-machine grant.

GET /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients

List registered "Sign in with Atlas" clients. The client secret is never re-revealed.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients

Register a "Sign in with Atlas" client. redirect_uris are validated as absolute https; the secret is revealed once (none for a public PKCE client).

PATCH /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId

Edit an OAuth client's name, redirect_uris, scopes, logo or auth method. Never changes the client_id or the secret.

POST /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/rotate_secret

Rotate a confidential client secret. The old secret stops working immediately.

DELETE /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId

Delete an OAuth client. Its authorization codes and grants cascade away with it.

GET /v1/dashboard/accounts/:accountId/instances/:instanceId/oauth_clients/:clientId/consents

The end-user consents (authorized users + scopes) granted to this OAuth client.