Discover OAuth capabilities

GET

/oauth/client-metadata

Returns OAuth server metadata for the given client, including supported
grant types, scopes, and code challenge methods.

Request

Query Params

Responses

🟢200OK

application/json

Client metadata returned successfully.

Bodyapplication/json

🟠400Bad Request

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.opensylo.com/oauth/client-metadata?client_id=mkt_live_abc123def456'

Response Example

200 - Success Example

{
    "grant_types_supported": [
        "authorization_code",
        "refresh_token"
    ],
    "response_types_supported": [
        "code"
    ],
    "scopes_supported": [
        "data.share.sales",
        "data.share.fulfillment",
        "data.share.payouts",
        "data.share.risk",
        "data.share.profile",
        "credit.score.read",
        "repayment.report",
        "sales.read",
        "sales.write",
        "repayments.read",
        "repayments.write",
        "account.flags.read",
        "account.flags.write",
        "merchant.profile.read",
        "marketplace.write",
        "marketplace.read"
    ],
    "code_challenge_methods_supported": [
        "S256",
        "plain"
    ],
    "token_endpoint_auth_methods_supported": [
        "client_secret_post"
    ]
}

Modified at 2026-06-10 14:59:29

Revoke a token

Submit single merchant data