List your personal access clients

Request

Returns the personal access clients registered against the authenticated user. A personal access client is the client_id half of the credentials the token endpoint exchanges for an access token, and id here is that client_id.

The listing is scoped to the caller and to nobody else: it returns the clients that caller registered, not every client in the account, and there is no parameter that widens it. Clients that have been withdrawn are left out, so an entry disappearing from this list means its credentials no longer work.

The response is a flat array. It carries no pagination envelope and takes no filter, sort or page parameters, so the whole set comes back in one call however many there are.

No client secret is returned, here or anywhere else in the API. Ask Rosterfy for the secret that goes with a client_id you hold.

Security

default

Rosterfy-Platformstring

curl -i -X GET \
  https://developer.rosterfy.com/_mock/api-docs/openapi/api/v2/oauth/clients \
  -H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
  -H 'Rosterfy-Platform: admin'

Responses

Bodyapplication/json

Array [

idinteger

user_idinteger

namestring

providerstring or null

redirectstring

personal_access_clientboolean

password_clientboolean

revokedboolean

created_atstring

updated_atstring

]

Response

[
  {
    "id": 1234,
    "user_id": 1234,
    "name": "Nightly roster export",
    "provider": null,
    "redirect": "https://example.com/oauth/callback",
    "personal_access_client": true,
    "password_client": false,
    "revoked": false,
    "created_at": "2026-01-14T02:08:00.000000Z",
    "updated_at": "2026-01-14T02:08:00.000000Z"
  },
  {
    "id": 1235,
    "user_id": 1234,
    "name": "Volunteer portal sync",
    "provider": null,
    "redirect": "https://example.com/oauth/callback",
    "personal_access_client": true,
    "password_client": false,
    "revoked": false,
    "created_at": "2026-02-03T09:41:17.000000Z",
    "updated_at": "2026-02-03T09:41:17.000000Z"
  }
]