name |
string |
The app's name. Tools use this name to get the person's token. Use up to 32 letters, digits, - and _. |
issuer? |
string |
The authorization server's issuer URL. Its metadata provides the endpoints. |
resource? |
string |
The API or MCP server that the tokens are for. If you don't set issuer, Wardrik finds it from this URL. |
authorization_endpoint? |
string |
The URL where people sign in, for a service that doesn't publish metadata. Set together with token_endpoint. |
token_endpoint? |
string |
The token endpoint. Set together with authorization_endpoint. |
client_id? |
string |
The OAuth app's client ID. If you leave it empty, Wardrik registers itself as a client, if the service allows it. |
client_secret? |
object |
The OAuth app's client secret, stored in the owner's vault. Wardrik reads it each time it is used, so a new value applies immediately. It is only sent to the token endpoint. |
client_secret.name |
string |
The name of the secret in the owner's vault. |
client_auth? |
"post" | "basic" |
How the client secret is sent: post (in the request body) or basic (HTTP Basic auth). Defaults to post. |
scopes? |
string[] |
The scopes to request. Defaults to none. |
flow? |
"browser" | "device" |
How people sign in. With browser, they sign in in a browser. With device, they enter a code on another device. Defaults to browser. |
authorization_params? |
object |
Extra parameters for the browser sign-in, for example access_type: offline. You can't override the parameters Wardrik sets. |