Dynamically register a new OAuth 2.0 client per RFC 7591.
Registration is open only to clients whose redirect_uris all point at a trusted AI assistant's own domain (claude.ai, claude.com, chatgpt.com, openai.com, cursor.com) or at the user's own machine (localhost, 127.0.0.1, ::1). An app that connects to hosts' accounts from its own domain is registered by Host Tools as an official partner instead: email [email protected]. A client_name containing "Host Tools" is refused unless the client only redirects to the local machine.
Returns client credentials that can be used in the authorization flow.
Public clients (default) do not receive a client_secret.
Confidential clients (token_endpoint_auth_method = "client_secret_post" or "client_secret_basic")
receive a client_secret that must be stored securely.