`PATCH /clients/{id}` — update name / scopes. A scopes change re-runs the owning app's subset cap.
/clients/{id}Path Parameters
Client id
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
PATCH /clients/{id} body — every field optional (absent = unchanged).
Changing scopes re-runs the subset cap.
Response Body
application/json
curl -X PATCH "https://example.com/clients/string" \ -H "Content-Type: application/json" \ -d '{}'{ "client_id": "string", "created_at": "string", "installation_id": "string", "last_used_at": "string", "name": "string", "scopes": [ "string" ], "updated_at": "string"}`GET /clients/{id}` — one client, gated on `clients:read`. GET
Previous Page
`GET /installations/{id}/clients` — the credentials one installation issued, gated on `clients:read`. GET
A credential is a sub-resource of its **installation** (ADR-0050 §5), so this is one Query on that partition. An installation whose App the caller cannot see answers `404`, like an absent one. It takes **no page parameters**: `MAX_CLIENTS_PER_INSTALLATION` bounds it. The `PaginatedResponse` envelope is kept for wire compatibility with every other list on this surface.