Security mode for third-party clients. `strict` enforces enhanced security controls: OAuth 2.1 alignment, explicit API authorization, and a curated set of supported features. `permissive` preserves pre-existing behavior and is only available to tenants with prior third-party client usage. Set on creation and cannot be modified.
AI AgentsAuthenticationAuthorizationFGAIdentity ManagementMCPOktaOpenID ConnectSAMLSecuritySCIM
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "#/components/schemas/ClientThirdPartySecurityModeEnum",
"title": "ClientThirdPartySecurityModeEnum",
"type": "string",
"description": "Security mode for third-party clients. `strict` enforces <a href=\"https://auth0.com/docs/get-started/applications/third-party-applications/security-controls\">enhanced security controls</a>: OAuth 2.1 alignment, explicit API authorization, and a curated set of supported features. `permissive` preserves <a href=\"https://auth0.com/docs/get-started/applications/third-party-applications/permissive-mode\">pre-existing behavior</a> and is only available to tenants with prior third-party client usage. Set on creation and cannot be modified.",
"enum": [
"strict",
"permissive"
],
"x-release-lifecycle": "GA"
}
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.