> ## Documentation Index
> Fetch the complete documentation index at: https://synthetiq.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# OAuth connections

> Managing OAuth applications for HTTP API and MCP access to deployed apps

Every deployed app acts as an OAuth 2.0 provider. External applications — HTTP API clients, MCP-compatible AI tools, and custom integrations — can authenticate users and consume the app's API through OAuth connections.

## What OAuth connections enable

| Access method | Description                                                                                                                        |
| ------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
| HTTP API      | External applications and Synthetiq services call the app's auto-generated HTTP endpoints with an OAuth access token               |
| MCP server    | AI tools like Claude Desktop, Cursor, and other MCP-compatible clients connect to the app's MCP server to call procedures as tools |

All requests through OAuth connections go through the same authentication, scope enforcement, and RLS middleware as requests from the app's own frontend.

## Admin: managing OAuth clients

Admins manage all OAuth applications registered against the app at `/admin/oauth-clients`.

<Frame caption="OAuth clients list with all registered applications">
  <img src="https://mintcdn.com/synthetiq/-jIlH6VGRYQP1yAa/images/platform-docs/deployments/administration/oauth-clients-admin.png?fit=max&auto=format&n=-jIlH6VGRYQP1yAa&q=85&s=560f6c2843615c692ca371288c0bdaf2" alt="Admin OAuth clients page" width="4106" height="2266" data-path="images/platform-docs/deployments/administration/oauth-clients-admin.png" />
</Frame>

<Note>
  Access requires admin-level scopes.
</Note>

From this page, admins can:

* View all registered OAuth applications (both admin-created and user-created)
* Revoke or delete OAuth applications
* View client details including redirect URIs and granted scopes

## Users: registering OAuth apps

Users register their own OAuth applications at `/settings/oauth-apps`. This allows users to create integrations that act on their behalf.

<Frame caption="User's OAuth applications with registration and management">
  <img src="https://mintcdn.com/synthetiq/-jIlH6VGRYQP1yAa/images/platform-docs/deployments/administration/oauth-apps-user.png?fit=max&auto=format&n=-jIlH6VGRYQP1yAa&q=85&s=4dbf0ccf881db40f663b4c06bfa43d5c" alt="User OAuth apps page" width="4098" height="2268" data-path="images/platform-docs/deployments/administration/oauth-apps-user.png" />
</Frame>

### Creating an OAuth app

Users create a new OAuth application at `/settings/oauth-apps/new`:

<Frame caption="OAuth application registration form">
  <img src="https://mintcdn.com/synthetiq/-jIlH6VGRYQP1yAa/images/platform-docs/deployments/administration/oauth-app-create.png?fit=max&auto=format&n=-jIlH6VGRYQP1yAa&q=85&s=46a1c2bd9a69773cdf01f1349df1c7df" alt="Create OAuth app form" width="4100" height="2274" data-path="images/platform-docs/deployments/administration/oauth-app-create.png" />
</Frame>

| Field        | Description                                           |
| ------------ | ----------------------------------------------------- |
| Name         | Display name for the application                      |
| Redirect URI | The callback URL where the authorization code is sent |
| Description  | Optional description of what the application does     |

After creation, the user receives a **client ID** and **client secret** to use in the OAuth flow.

## Connecting via the HTTP API

External applications can call the app's auto-generated [HTTP API](/docs/platform-docs/app-framework/headless/http-api) using an OAuth access token. The full API spec and interactive console are available in the app's [built-in API docs](/docs/platform-docs/app-framework/docs/api).

## Connecting AI tools via MCP

MCP-compatible AI tools can connect to the app's [MCP server](/docs/platform-docs/app-framework/headless/mcp) using OAuth credentials. The tool authenticates as the user and can call any procedure the user has access to.