Apps

Register and update a partner OAuth application.

A partner app holds client_id, hashed client_secret, redirect URIs, allowed scopes, and allowed consent purposes.

POST /v1/apps is typically called by Swapnice during onboarding with an app registration key. Partners then use GET and PATCH with an access token that includes apps:read or apps:write.

The client secret is returned once. Store it in your secret manager.

Endpoints in this group

Method	Path	Scope
POST	/v1/apps	App registration key
GET	/v1/apps/{app_id}	apps:read
PATCH	/v1/apps/{app_id}	apps:write

Mutating calls require an Idempotency-Key header.

See authentication for redirect URI rules and scope templates.