# PipesHub OAuth Apps API

**Canonical:** https://apis.io/apis/pipeshub/pipeshub-oauth-apps-api/  
**Provider:** PipesHub — https://apis.io/providers/pipeshub/  
**Base URL:** https://app.pipeshub.com/api/v1  
**Documentation:** https://docs.pipeshub.com/developer/api-reference

PipesHub OAuth Apps API is one of 51 APIs that [PipesHub](https://apis.io/providers/pipeshub/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include OAuth Apps. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and 6 JSON Schemas.

Manage OAuth 2.0 client applications registered with PipesHub. OAuth apps allow third-party applications to access PipesHub APIs on behalf of users or organizations. Each app receives a client ID and secret for authentication. **Who can see which apps** - **Everyone (including org admins)** sees and manages only OAuth apps **they created** (`createdBy`). Other members' apps are hidden (not listed; individual operations return not found). **Session only** - Every `/oauth-clients/*` route requires the user's interactive session JWT. OAuth access tokens and personal access tokens (`phpat_...`) are rejected with `403`, so a token issued to a client can never register, reconfigure, or revoke clients on its own. **Who authorizes vs. client credentials** - **Authorization code:** Any authenticated user in the workspace may complete consent for a valid `client_id`; issued tokens represent **that user**. - **Client credentials:** Access tokens represent the **OAuth app creator** (who registered the client), not the caller. **Scopes** - `GET /oauth-clients/scopes` returns scopes grouped by category for the **signed-in user's role**. - **Org admins** may register apps that request additional **admin-only** scopes; non-admins cannot select those scopes when creating or updating an app. **App Types:** - **Confidential clients**: Server-side apps that can securely store secrets - **Public clients**: Browser/mobile apps that cannot securely store secrets (use PKCE) **App Lifecycle:** - Create apps with name, redirect URIs, allowed scopes, and optional URLs (homepage, privacy, terms) - Regenerate secrets if compromised - Suspend/activate apps to control access - Revoke all tokens for emergency access removal

## Operations (12)

| Method | Path | Summary |
|---|---|---|
| GET | `/oauth-clients` | List OAuth apps |
| POST | `/oauth-clients` | Create OAuth app |
| GET | `/oauth-clients/scopes` | List available scopes |
| GET | `/oauth-clients/{appId}` | Get OAuth app details |
| PUT | `/oauth-clients/{appId}` | Update OAuth app |
| DELETE | `/oauth-clients/{appId}` | Delete OAuth app |
| POST | `/oauth-clients/{appId}/regenerate-secret` | Regenerate client secret |
| POST | `/oauth-clients/{appId}/suspend` | Suspend OAuth app |
| POST | `/oauth-clients/{appId}/activate` | Activate suspended OAuth app |
| GET | `/oauth-clients/{appId}/tokens` | List app tokens |
| POST | `/oauth-clients/{appId}/revoke-all-tokens` | Revoke all app tokens |
| PUT | `/oauth-clients/{appId}/token-identity` | Choose whose identity this app's client_credentials tokens carry |

## Machine-readable artifacts (8)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/pipeshub/refs/heads/main/openapi/pipeshub-oauth-apps-api-openapi.yml
- **Documentation** — https://docs.pipeshub.com/developer/api-reference
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/pipeshub/refs/heads/main/json-schema/pipeshub-get-record-by-id-response-schema-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/pipeshub/refs/heads/main/json-schema/pipeshub-record-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/pipeshub/refs/heads/main/json-schema/pipeshub-knowledge-hub-nodes-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/pipeshub/refs/heads/main/json-schema/pipeshub-agent-create-conversation-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/pipeshub/refs/heads/main/json-schema/pipeshub-conversation-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/pipeshub/refs/heads/main/json-schema/pipeshub-create-conversation-request-schema.json

## Other PipesHub APIs (12)

- [PipesHub Agents API](https://apis.io/apis/pipeshub/pipeshub-agents-api/)
- [PipesHub AI Models Providers API](https://apis.io/apis/pipeshub/pipeshub-ai-models-providers-api/)
- [PipesHub Authentication Configuration API](https://apis.io/apis/pipeshub/pipeshub-authentication-configuration-api/)
- [PipesHub Configuration Manager API](https://apis.io/apis/pipeshub/pipeshub-configuration-manager-api/)
- [PipesHub Connector API](https://apis.io/apis/pipeshub/pipeshub-connector-api/)
- [PipesHub Connector Configuration API](https://apis.io/apis/pipeshub/pipeshub-connector-configuration-api/)
- [PipesHub Connector Control API](https://apis.io/apis/pipeshub/pipeshub-connector-control-api/)
- [PipesHub Connector Filters API](https://apis.io/apis/pipeshub/pipeshub-connector-filters-api/)
- [PipesHub Connector Instances API](https://apis.io/apis/pipeshub/pipeshub-connector-instances-api/)
- [PipesHub Connector OAuth API](https://apis.io/apis/pipeshub/pipeshub-connector-oauth-api/)
- [PipesHub Connector Registry API](https://apis.io/apis/pipeshub/pipeshub-connector-registry-api/)
- [PipesHub Connectors API](https://apis.io/apis/pipeshub/pipeshub-connectors-api/)

## Tags

OAuth Apps

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/pipeshub/pipeshub-oauth-apps-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/pipeshub/.