Update a custom OAuth client (rotate its secret, change its redirect URI or method)
Updates one of this space's custom clients in place, by its id (an org-level client id is a 404 here). Its client_id cannot change. Auto-provisioned (DCR/CIMD) clients are machine-managed and rejected. Requires integrations:configure, which is never granted to an API key.
PATCH
/api/integrations/{packageId}/oauth-clients/{clientId}better-auth.session_token<token>
Cookie session from Better Auth. Requires X-Org-Id header for org-scoped routes.
In: cookie
Path Parameters
packageId*string
Integration package id (e.g. @official/gmail).
Match
^@[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*$clientId*string
Custom OAuth client id (integration_oauth_clients.id, UUID).
Format
uuidHeader Parameters
X-Org-Id?string
Organization ID. Required for cookie auth. Not needed for API key auth (org resolved from key).
Format
uuidX-Space-Id?string
Space ID. Required for space-scoped routes (agents, runs, schedules, and space-scoped module routes). Not needed for API key auth (space resolved from key).
Request Body
application/json
curl -X PATCH "https://your-instance/api/integrations/string/oauth-clients/497f6eca-6276-4993-bfeb-53cbbbba6f08" \ -H "Content-Type: application/json" \ -d '{}'{
"id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
"spaceId": "string",
"integration_package_id": "string",
"auth_key": "string",
"client_id": "string",
"has_client_secret": true,
"token_endpoint_auth_method": "client_secret_post",
"redirect_uri": "string",
"createdAt": "2019-08-24T14:15:22Z",
"updatedAt": "2019-08-24T14:15:22Z"
}{
"type": "https://docs.appstrate.dev/errors/validation-failed",
"title": "Validation Failed",
"status": 400,
"detail": "name: Invalid input: expected string, received undefined (+2 more)",
"code": "validation_failed",
"request_id": "req_abc123",
"errors": [
{
"field": "name",
"code": "required",
"message": "Invalid input: expected string, received undefined"
},
{
"field": "email",
"code": "invalid_format",
"message": "Invalid email address"
},
{
"field": "age",
"code": "invalid_type",
"message": "Invalid input: expected number, received string"
}
]
}{
"type": "https://docs.appstrate.dev/errors/forbidden",
"title": "Forbidden",
"status": 403,
"detail": "Insufficient permissions",
"code": "forbidden",
"request_id": "req_abc123"
}{
"type": "https://docs.appstrate.dev/errors/not-found",
"title": "Not Found",
"status": 404,
"detail": "Resource not found",
"code": "not_found",
"request_id": "req_abc123"
}