---
title: "OAuthApplicationCreated"
description: "Returned only at creation time and from the rotate-secret endpoint.
`clientSecret` is shown once; subsequent reads return the application
row without it."
section: "Reference"
group: "Types"
order: 157
---

## Definition

```ts
interface OAuthApplicationCreated {
  application: {
    clientId: string;
    name: string;
    type: "public" | "web" | "native" | "user-agent-based";
    redirectUrls: Array<string>;
    ownerOrgId: string;
    allowedScopes: Array<"workspace:read" | "workspace:write">;
    isFirstParty: boolean;
    disabled: boolean;
    createdAt: string;
    updatedAt: string;
  };
  clientSecret: string | null;
}
```

## Fields

| Field          | Type                                                                                                                                                                                                                                                                                           | Notes                                                                                                                                                                       |
| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `application`  | `{ clientId: string; name: string; type: "public" \| "web" \| "native" \| "user-agent-based"; redirectUrls: Array<string>; ownerOrgId: string; allowedScopes: Array<"workspace:read" \| "workspace:write">; isFirstParty: boolean; disabled: boolean; createdAt: string; updatedAt: string; }` | `required`                                                                                                                                                                  |
| `clientSecret` | `string \| null`                                                                                                                                                                                                                                                                               | `required` — Plaintext client secret — null for PKCE-only public clients. Shown ONCE at creation; cannot be retrieved later. Use the rotate endpoint to issue a new secret. |