Rotate Clerk OAuth application secret

Rotate the client secret for an OAuth application in a connected Clerk application.

← All Clerk endpoints · Capability overview

POST/v1/clerk/oauth-applications/{oauth_application_id}/rotate-secret

https://api.vee3.io/v1/clerk/oauth-applications/{oauth_application_id}/rotate-secret

10 tokens

Rotate the client secret for an OAuth application in a connected Clerk application.

Authorization

Send your API key in the Authorization header:

Authorization: Bearer YOUR_API_KEY

MCP

The same capability is available as an MCP tool on Vee3 hosted MCP.

Tool name

clerk.rotate_oauth_application_secret

Parameters2 fields

clerk_instance_idstringOptional

Clerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.

oauth_application_idstringRequired

Clerk OAuth application id (oa_...) to retrieve, update, or delete.

Response19 fields

oauth_applicationobject

18 fields

OAuth application summary with the new client_secret.

idstring

OAuth application id (oa_...).

namestring

OAuth application display name.

client_idstring

OAuth client id issued to authorized clients.

client_secretstring

OAuth client secret. Empty for public clients. Treat as high-privilege — do not log.

client_image_urlstring

URL of the OAuth application logo when set.

client_uristring

Homepage URI for the OAuth client.

redirect_urisstring[]

Allowed redirect URIs for the OAuth authorization flow.

scopesstring

Space-delimited scopes granted by this OAuth application.

consent_screen_enabledboolean

Whether the consent screen is shown during authorization.

publicboolean

Whether this is a public OAuth client (PKCE-capable, no client secret).

pkce_requiredboolean

Whether PKCE is required for the authorization flow.

dynamically_registeredboolean

Whether the OAuth application was registered dynamically.

instance_idstring

Clerk instance id (ins_...) that owns this OAuth application.

authorize_urlstring

Authorization endpoint URL for this OAuth application.

token_fetch_urlstring

Token endpoint URL for exchanging authorization codes.

discovery_urlstring

OpenID Connect discovery document URL.

created_atinteger

Unix timestamp in milliseconds when the OAuth application was created.

updated_atinteger

Unix timestamp in milliseconds when the OAuth application was last updated.

HTTP errors: clerk_connection_required, clerk_connection_not_found, clerk_connection_invalid, validation_error, unauthorized, payment_required

Example request

Python

import requests

url = "https://api.vee3.io/v1/clerk/oauth-applications/{oauth_application_id}/rotate-secret"
headers = {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json",
}
payload = {
    "oauth_application_id": "oa_2abc123"
}

response = requests.post(url, headers=headers, json=payload)
response.raise_for_status()
data = response.json()
print(data)

Example responses1 example

200OAuth application after secret rotation.

rotated_oauth_application_secret.json

{
  "oauth_application": {
    "id": "oa_2abc123",
    "name": "My OAuth App",
    "client_id": "client_2abc123",
    "client_secret": "new_secret_value",
    "updated_at": 1710100000000
  }
}