Auth Clients API

Manage OAuth clients for your applications.

Base URL: https://api.bluenexus.ai/api/v1/auth-clients

POST /auth-clients

Create an auth client.

Auth: Bearer token

{
  "name": "My App",
  "type": "confidential",
  "roles": ["third-party"],
  "redirectUris": ["https://myapp.com/callback"],
  "allowedScopes": ["universal-mcp-read-write", "agents-use", "llm-all"],
  "allowedProviders": null,
  "branding": {
    "logo": "data:image/png;base64,...",
    "description": "AI productivity app",
    "brandColor": "#4F46E5"
  }
}

Response (201):

{
  "clientId": "client_a1b2c3d4e5f6...",
  "clientSecret": "secret_x1y2z3...",
  "client": { ... }
}

Roles

Role	Description
third-party	Standard third-party integration
whitelabel-customer	White-label with custom branding

Client Types

Type	Description
public	Cannot store secrets (SPAs, mobile)
confidential	Can store secrets (server-side)

---

GET /auth-clients

List auth clients for the account.

---

GET /auth-clients/:clientId

Get a specific client.

---

PUT /auth-clients/:clientId

Update a client (name, redirect URIs, scopes, branding, etc.).

---

DELETE /auth-clients/:clientId

Delete a client.

---

PUT /auth-clients/:clientId/secret

Rotate the client secret. Returns the new secret (only shown once).