Download the OAuth app-registration manifest
Returns the deterministic OAuth 2.0 client-registration manifest (RFC 7591-shaped) for building a marketplace app, pre-wired to your API host with the standard authorization-code + PKCE flow metadata and the full grantable-scope catalog. Fill in the client name, redirect URIs, and scope, then submit it to register an app customers install with a scoped grant instead of a full-access API key. Sent as a downloadable attachment (orbit-<slug>.oauth-app.json) that embeds no credential. Requires an authenticated owner, admin, or developer session.
Authorizations
Dashboard JWT token from Clerk
Response
The OAuth app-registration manifest, sent as a downloadable attachment.
Manifest schema marker.
orbit.oauth-app/v1 App-definition semver.
Authorization-code + PKCE flow metadata and the authorization/token/revocation endpoints under your host.
Placeholder client fields (name, redirect URIs, default scope, logo/homepage) the developer replaces.
The full grantable-scope catalog for the scope picker.
Human label for the tenant the manifest targets.