Docuflex › E-signature › API › OAuth clients

API reference: OAuth clients

Method	Path	What it does
`POST`	`/v1/accounts/{accountId}/oauth-clients`	Register an OAuth client The client secret is returned ONCE in this response and never again.
`GET`	`/v1/accounts/{accountId}/oauth-clients`	List OAuth clients
`GET`	`/v1/accounts/{accountId}/oauth-clients/{clientId}`	Get one OAuth client
`PATCH`	`/v1/accounts/{accountId}/oauth-clients/{clientId}`	Update an OAuth client (name, redirect URIs, scopes, grants, JWKS)
`DELETE`	`/v1/accounts/{accountId}/oauth-clients/{clientId}`	Revoke an OAuth client

Conventions

Base URL: https://api.docuflex.net; tenant routes are /v1/accounts/{accountId}/....
Auth: x-api-key: dfx_live_..., or Authorization: Bearer <OAuth2 access token>.
Errors: always {"error":{"code","message","details","requestId"}}; the requestId is also in the x-request-id header.
Pagination: offset (?page=&pageSize=, max 100) or cursor (?cursor=&limit=, follow nextCursor until hasMore is false).
Idempotency: any POST or PUT accepts Idempotency-Key; same key + different body is 409 IDEMPOTENCY_KEY_REUSED.
Rate limits: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset on every response; 429 RATE_LIMITED with Retry-After.
Tabs: coordinates are fractions of the page (origin top-left); documentIndex and recipientIndex refer to positions in the same request.
Spec: /openapi.json (OpenAPI 3). TypeScript client @docuflex/sdk; Postman and Bruno collections ship with the repo.