App Setup

Developer apps identify your integration and define the security boundary for OAuth, API keys, and webhooks.

Required Fields

• name: Displayed to users during OAuth consent.
• redirectUris: Exact callback URLs allowed for authorization code exchange.
• allowedOrigins: Browser origins allowed for future client-side APIs.
• scopes: Maximum permissions this app can request.

Secrets

Client Secrets are shown once. Store them in your backend secret manager. If a secret is exposed, rotate it from the app settings page.

CLIENT_ID=8b_client_...
CLIENT_SECRET=8b_secret_...