Skip to content

DynamicClientMetadata

HTTP API schema

← HTTP API reference

DynamicClientMetadata fields

client_namestring

Unverified display name.

maxLength: 200

redirect_urisarray<string>Required

Exact callbacks must form either an entirely localhost/loopback set or an entirely remote HTTPS set. HTTP is allowed only for localhost or literal loopback IPs. Local and remote callbacks cannot be mixed; user information and fragments are forbidden.

token_endpoint_auth_methodstringRequired

Allowed values: none.

grant_typesarray<string>

authorization_code, optionally with refresh_token, each at most once. Omitted, the server registers authorization_code and refresh_token and returns them.

uniqueItems: true

response_typesarray<string>
scopestring

Space-separated OAuthScope values accepted by the deployment DCR allowed_scopes policy. Omission selects endpoint:read (the least-privilege default) when the deployment allows it, and is refused otherwise.

client_uristring

Unverified descriptive URL; never fetched as evidence.

maxLength: 2048

software_idstring

Unverified software claim.

maxLength: 200

software_versionstring

maxLength: 100

software_statementstring

Unsupported; rejected if supplied.

View source specification ↗