`POST /clients` — mint a client credential + return its one-time secret.
/clientsRequest Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
POST /clients body. The credential is issued against the installation
installation_id names (ADR-0050 §5) and acts as that installation's
App. scopes is the declared subset the token can never exceed,
capped to ⊆ the installation's grants — not the App's, and not
a role bundle's.
Response Body
application/json
curl -X POST "https://example.com/clients" \ -H "Content-Type: application/json" \ -d '{ "installation_id": "string", "name": "string", "scopes": [ "string" ] }'{ "client": { "client_id": "string", "created_at": "string", "installation_id": "string", "last_used_at": "string", "name": "string", "scopes": [ "string" ], "updated_at": "string" }, "client_secret": "string"}