POST
/
api
/
oauth
/
register
curl -X POST https://api.costmcp.com/api/oauth/register \
  -H "Content-Type: application/json" \
  -d '{
    "client_name": "My Agent",
    "redirect_uris": ["https://example.com/callback"],
    "token_endpoint_auth_method": "none",
    "grant_types": ["authorization_code", "refresh_token"],
    "response_types": ["code"]
  }'
Public endpoint. Returns 201 with client_id (cmcp_client_...). Confidential clients also receive client_secret (cmcp_secret_...).
​
redirect_uris
string[]
required
At least one redirect URI
​
client_name
string
Display name shown on consent
​
grant_types
string[]
Typically authorization_code, refresh_token
​
response_types
string[]
Typically ["code"]
​
token_endpoint_auth_method
string
Default "none" (public PKCE clients)
​
scope
string
Space-separated scopes
​
logo_uri
string
Optional logo URL
​
client_uri
string
Optional homepage
StatusBody
400{ error, error_description }
500server_error
curl -X POST https://api.costmcp.com/api/oauth/register \
  -H "Content-Type: application/json" \
  -d '{
    "client_name": "My Agent",
    "redirect_uris": ["https://example.com/callback"],
    "token_endpoint_auth_method": "none",
    "grant_types": ["authorization_code", "refresh_token"],
    "response_types": ["code"]
  }'