Update OAuth client
Partial update. Editable: name, redirect_uris, permissions, grant_types, status (redirect_uris / permissions full-replace). status:“disabled” cascade-revokes the client’s oauth grants and issued tokens. Tightening permissions affects only future mints: live tokens keep their frozen set; use disabled / delete for an immediate cut. client_id / is_confidential / registration_kind are not editable. At least one field required.
Contract:
- MCP tool
update_oauth_client, registry packagemcp.id/oauth_clients, mountid.access. - Operation
update, response envelopeupdate. - Flags: none.
Authorizations
Access token issued by gtm.service.id. Its access_identity claim carries team_sid, actor_sid and actor_type, and that team scope is authoritative.
Team scope for tokens that do not carry one. Ignored when the token already names a team.
Path Parameters
OAuth client sid (id_oc_…).
18^id_oc_Body
Request body of update_oauth_client.
1 - 255FULL replacement of the exact-match https allow-list.
12048^https:\/\/FULL replacement of the permission ceiling.
1281authorization_code, refresh_token disabled cascade-revokes the client's grants + issued tokens.
active, disabled