List OAuth clients

List every OAuth client visible to the current organization — both org-level clients pinned to the org and space-level clients pinned to any TEAM space the org owns. Personal spaces are excluded: none can hold a client, and enumerating them would name a member's private space to the other administrators.

GET/api/oauth/clients

Authorization

better-auth.session_token<token>

Cookie session from Better Auth. Requires X-Org-Id header for org-scoped routes.

In: cookie

Header Parameters

X-Org-Id?string

Organization ID. Required for cookie auth. Not needed for API key auth (org resolved from key).

Formatuuid

curl -X GET "https://your-instance/api/oauth/clients"

{
  "object": "list",
  "data": [
    {
      "id": "string",
      "clientId": "string",
      "name": "string",
      "level": "instance",
      "referencedOrgId": "string",
      "referencedSpaceId": "string",
      "redirectUris": [
        "http://example.com"
      ],
      "postLogoutRedirectUris": [
        "http://example.com"
      ],
      "scopes": [
        "string"
      ],
      "disabled": true,
      "isFirstParty": true,
      "allowSignup": true,
      "signupRole": "guest",
      "signupSpaceAssignments": [
        {
          "spaceId": "string",
          "preset_role": "admin",
          "custom_role_id": "string"
        }
      ],
      "createdAt": "string",
      "updatedAt": "string"
    }
  ],
  "hasMore": true
}

{
  "type": "https://docs.appstrate.dev/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "detail": "Insufficient permissions",
  "code": "forbidden",
  "request_id": "req_abc123"
}

{
  "type": "https://docs.appstrate.dev/errors/rate-limited",
  "title": "Rate Limited",
  "status": 429,
  "detail": "Too many requests. Please try again shortly.",
  "code": "rate_limited",
  "request_id": "req_abc123",
  "retry_after": 30
}