List the org-level OAuth clients of an integration auth

Returns the org's own clients (org, oldest first) plus the default it inherits, the platform-provided system client (system), if any. is_default marks the org-tier default. Secrets are never returned. Only oauth2 auths whose client is not auto-provisioned (DCR/CIMD) have an org tier; any other auth is a 400. Requires org-integrations:configure, which is never granted to an API key.

GET/api/org-integrations/{scope}/{name}/auths/{authKey}/clients

Authorization

better-auth.session_token<token>

Cookie session from Better Auth. Requires X-Org-Id header for org-scoped routes.

In: cookie

Path Parameters

scope*string

Package scope (e.g. @myorg)

Match^@[a-z0-9][a-z0-9-]*$
name*string

Package name

authKey*string

Auth key as declared in the manifest's auths map.

Match^[a-z][a-z0-9_]*$

Header Parameters

X-Org-Id?string

Organization ID. Required for cookie auth. Not needed for API key auth (org resolved from key).

Formatuuid
curl -X GET "https://your-instance/api/org-integrations/string/string/auths/string/clients"
{
  "object": "list",
  "hasMore": true,
  "data": [
    {
      "client_ref": "string",
      "source": "system",
      "client_id": "string",
      "is_default": true,
      "auto_provisioned": true,
      "has_client_secret": true,
      "token_endpoint_auth_method": "client_secret_post",
      "redirect_uri": "string"
    }
  ]
}

{
  "type": "https://docs.appstrate.dev/errors/validation-failed",
  "title": "Validation Failed",
  "status": 400,
  "detail": "name: Invalid input: expected string, received undefined (+2 more)",
  "code": "validation_failed",
  "request_id": "req_abc123",
  "errors": [
    {
      "field": "name",
      "code": "required",
      "message": "Invalid input: expected string, received undefined"
    },
    {
      "field": "email",
      "code": "invalid_format",
      "message": "Invalid email address"
    },
    {
      "field": "age",
      "code": "invalid_type",
      "message": "Invalid input: expected number, received string"
    }
  ]
}

{
  "type": "https://docs.appstrate.dev/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "detail": "Insufficient permissions",
  "code": "forbidden",
  "request_id": "req_abc123"
}
{
  "type": "https://docs.appstrate.dev/errors/not-found",
  "title": "Not Found",
  "status": 404,
  "detail": "Resource not found",
  "code": "not_found",
  "request_id": "req_abc123"
}