deactivate_oauth_client
Destructive
Deactivate an OAuth client so it can no longer obtain new tokens. The client record remains with its name, scopes, and history, but appears inactive; existing tokens still expire naturally.
Instructions
Turn an API client off. It can no longer obtain a token.
`id` is the client's record id from `list_oauth_clients`.
THIS IS A DEACTIVATION, NOT A DELETION. Skilljar's endpoint is a DELETE verb but
its own summary calls it "Deactivate client": the record survives, keeps its
name, scopes and history, and continues to appear in `list_oauth_clients` with
`is_active` false. Do not report it as deleted.
Anything using this client stops working at its next token request. A token
already issued lives until it expires, so deactivating is not instant lockout —
pair it with `revoke_refresh_token` if you need the access gone now.
Requires the `clients:write` OAuth scope, and the `admin` capability profile.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| name | No | ||
| warning | No | ||
| client_id | No | ||
| is_active | No | ||
| created_at | No | ||
| description | No | ||
| ip_allowlist | No | ||
| client_secret | No | ||
| scope_codenames | No |