Skip to main content
POST
/
oauth
/
register
Register Client
curl --request POST \
  --url https://{tenant}.app.big-panda.ai/oauth/register \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "client_name": "<string>",
  "redirect_uris": [
    "<string>"
  ],
  "grant_types": [
    "<string>"
  ],
  "response_types": [
    "<string>"
  ],
  "token_endpoint_auth_method": "<string>",
  "scope": "<string>"
}
'
{
  "client_id": "<string>",
  "client_secret": "<string>",
  "client_id_issued_at": 123,
  "client_name": "<string>",
  "redirect_uris": [
    "<string>"
  ],
  "grant_types": [
    "<string>"
  ],
  "response_types": [
    "<string>"
  ],
  "token_endpoint_auth_method": "<string>",
  "scope": "<string>",
  "client_secret_expires_at": 0
}

Authorizations

​
Authorization
string
header
required

API-Token aus dem Big-Panda-Admin-UI unter Einstellungen → API-Keys. Header: Authorization: Bearer <token>.

Body

application/json

DCR request body (RFC 7591 §2).

Only the fields we care about are validated. Extra keys are ignored by Pydantic default so future MCP-spec additions don't break existing clients.

​
client_name
string
required
Required string length: 1 - 200
​
redirect_uris
string[]
required
Minimum array length: 1
​
grant_types
string[] | null
​
response_types
string[] | null
​
token_endpoint_auth_method
string | null
​
scope
string | null

Response

Successful Response

DCR response body (RFC 7591 §3.2).

​
client_id
string
required
​
client_secret
string
required
​
client_id_issued_at
integer
required
​
client_name
string
required
​
redirect_uris
string[]
required
​
grant_types
string[]
required
​
response_types
string[]
required
​
token_endpoint_auth_method
string
required
​
scope
string
required
​
client_secret_expires_at
integer
default:0