Organisations

Change an organisation's app

Changes the name, homepage, redirect addresses, or whether only members may connect it.

PATCH/orgs/{org}/apps/{id}

TL;DR

Question	Answer
What does it do?	Change an organisation's app.
What does it take?	A JSON body of type `OrgAppChangeBody`.
What does it return?	Status 200 with a body of type `RegisteredApp`.
What can go wrong?	`400` the body is not valid; `401` not signed in; `403` only the owner or an admin may (orgs.forbidden), or the origin may not make changes; `404` no such organisation or app; `422` a redirect address or the homepage breaks the rules (apps.invalid); `429` too many requests; `503` organisations are not set up on this server. Every failure uses the one error envelope.

Changes the name, homepage, redirect addresses, or whether only members may connect it. The owner and an admin may.

Field	Type	Required	Description
`org`	`string`	yes	The organisation's id or its slug.
`id`	`string`	yes

The body has the type OrgAppChangeBody.

Field	Type	Required	Description
`name`	`string`	no	at least 3 characters; at most 60 characters.
`homepage`	`string \| null`	no	at most 2048 characters.
`redirectUris`	`string[]`	no	One to ten addresses a code may be sent to, matched exactly: https, or http on localhost, 127.0.0.1 or [::1] with any port.
`membersOnly`	`boolean`	no

Status	Meaning	Body
200	The app as it is now.	`RegisteredApp`
400	The body is not valid.	`ErrorResponse`
401	Not signed in.	`ErrorResponse`
403	Only the owner or an admin may (orgs.forbidden), or the origin may not make changes.	`ErrorResponse`
404	No such organisation or app.	`ErrorResponse`
422	A redirect address or the homepage breaks the rules (apps.invalid).	`ErrorResponse`
429	Too many requests.	`ErrorResponse`
503	Organisations are not set up on this server.	`ErrorResponse`

A 200 answer has the type RegisteredApp.

Field	Type	Required	Description
`id`	`string`	yes	The app's id, which is its OAuth client_id.
`name`	`string`	yes	Shown to people as a claim on the consent page.
`homepage`	`string \| null`	yes
`clientType`	`"confidential" \| "public"`	yes	confidential holds a client secret on its server; public (a page or a tool with no server) holds none.
`redirectUris`	`string[]`	yes
`membersOnly`	`boolean`	yes	For an organisation's app: only its members may connect it, to the organisation.
`hasSecret`	`boolean`	yes
`createdAt`	`integer`	yes	Milliseconds since the epoch.
`updatedAt`	`integer`	yes	Milliseconds since the epoch.

Doc	Why
API reference	Every endpoint, and the error envelope
Schemas	Every request and response type
Tool reference	The operations as callable tools