Skip to main content
GET
TypeScript

Path Parameters

webhookOauthId
string<uuid>
required

The unique identifier of the OAuth credentials

Example:

"44fcead0-7053-4831-a53a-df7fb90d440f"

Response

An OAuth credentials object

A stored OAuth 2.0 client credential set, referenced by webhooks through their webhookOauthId. When a webhook references one, the dispatcher fetches a bearer token from url before each delivery and attaches it as Authorization: Bearer {token}. Secret material is never returned: clientSecret is absent from this schema entirely, and the customJwtClaims, customBodyParams and customHeaders fields are reduced to their names, without the configured values.

id
string<uuid>
required

The id of the OAuth credentials. Pass this as a webhook's webhookOauthId to attach them.

Example:

"123e4567-e89b-12d3-a456-426614174000"

name
string
required

The label given to this credential set.

Example:

"Production treasury gateway"

clientId
string
required

OAuth client ID used to authenticate with the token endpoint.

Example:

"my-client-id"

url
string
required

Token endpoint URL.

Example:

"https://auth.example.com/oauth/token"

authMethod
string
default:client_secret_basic
required

How the client credentials are presented to the token endpoint: client_secret_basic, client_secret_post or client_secret_jwt. Credentials created without this field report client_secret_basic, which is what they use.

Example:

"client_secret_basic"

createdAt
integer<int64>
required

The date and time the OAuth credentials were created, in milliseconds.

Example:

1625097600000

updatedAt
integer<int64>
required

The date and time the OAuth credentials were last updated, in milliseconds.

Example:

1625097600000

customJwtClaims
string[]

Names of the additional claims placed in the JWT assertion. Claim values are write-only and are never returned. Absent when no custom claims are configured.

Example:
customBodyParams
string[]

Names of the additional parameters added to the token request body. Parameter values are write-only and are never returned. Absent when no custom parameters are configured.

Example:
customHeaders
string[]

Names of the additional HTTP headers added to the token request sent to the authorization server — not to the webhook delivery, which has its own separate customHeaders. Header values are write-only and are never returned. Absent when no custom headers are configured.

Example:
mtlsClientSignedCert
string

PEM-encoded client certificate used for mTLS when fetching OAuth tokens.

Example:

"-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----"