get_oauth_client
Retrieve details of a single OAuth client by ID to check its active status, permitted scopes, and IP allowlist. Identifies whether the client can still obtain tokens and what actions it can perform.
Instructions
Inspect one API client: what it may do, and whether it still works.
`id` is the client's record id from `list_oauth_clients`, not its `client_id`
(the value used when authenticating). Both are on the row.
`is_active` false means the client has been deactivated and can no longer obtain
a token. `scope_codenames` is exactly what it may do; `ip_allowlist`, when
non-empty, is where it may do it from.
No secret is returned. There is no way to read one back.
Requires the `clients:read` OAuth scope, and the `admin` capability profile.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| name | No | ||
| warning | No | ||
| client_id | No | ||
| is_active | No | ||
| created_at | No | ||
| description | No | ||
| ip_allowlist | No | ||
| client_secret | No | ||
| scope_codenames | No |