> ## Documentation Index
> Fetch the complete documentation index at: https://docs.matrices.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create or rotate a remote MCP toolset's OAuth client



## OpenAPI

````yaml /openapi/platform.v1.json put /v1/toolsets/{toolsetId}/oauth-client
openapi: 3.0.3
info:
  description: Public platform API for catalog and proxied data-plane routes.
  title: Matrices Platform API
  version: v1
servers:
  - url: https://api.matrices.com
security: []
tags:
  - description: Authenticated bearer credential context.
    name: auth
    x-group: Auth
  - description: Write-only provider credentials with safe connection metadata.
    name: connections
    x-group: Connections
  - description: Materialized workspace principals and active agent counts.
    name: identities
    x-group: Identities
  - description: Remote MCP server registrations.
    name: toolsets
    x-group: Toolsets
  - description: Named allow-only agent tool permissions.
    name: roles
    x-group: Roles
  - description: Client-executed tool calls.
    name: tools
    x-group: Tools
  - description: Reusable agent behavior profiles.
    name: profiles
    x-group: Profiles
  - description: Workspace-owned agent identities.
    name: agents
    x-group: Agents
  - description: Immutable private image inputs.
    name: images
    x-group: Images
  - description: Public model catalog.
    name: models
    x-group: Models
  - description: Running agent threads.
    name: threads
    x-group: Threads
  - description: Agent schedules.
    name: schedules
    x-group: Schedules
  - description: Workspace append-only feeds.
    name: feeds
    x-group: Feeds
  - description: Agent subscriptions over workspace feeds.
    name: subscriptions
    x-group: Subscriptions
  - description: Agent-private and workspace-shared durable memory notes.
    name: memory
    x-group: Memory
  - description: Thread messages.
    name: messages
    x-group: Messages
  - description: Thread event log data.
    name: events
    x-group: Events
  - description: Runtime hook audit and wait resolution.
    name: hooks
    x-group: Hooks
paths:
  /v1/toolsets/{toolsetId}/oauth-client:
    put:
      tags:
        - toolsets
      summary: Create or rotate a remote MCP toolset's OAuth client
      operationId: PutToolsetOAuthClient
      parameters:
        - $ref: '#/components/parameters/ToolsetID'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ToolsetOAuthClientPutRequest'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ToolsetOAuthClientResponse'
          description: Updated safe OAuth client configuration.
        '400':
          $ref: '#/components/responses/BadRequest'
        '404':
          $ref: '#/components/responses/NotFound'
        '409':
          $ref: '#/components/responses/Conflict'
        '503':
          $ref: '#/components/responses/CatalogUnavailable'
      security:
        - APIKeyBearer: []
components:
  parameters:
    ToolsetID:
      in: path
      name: toolsetId
      required: true
      schema:
        type: string
  schemas:
    ToolsetOAuthClientPutRequest:
      properties:
        authMethod:
          $ref: '#/components/schemas/OAuthClientAuthMethod'
        clientId:
          maxLength: 2048
          type: string
        expectedGeneration:
          format: int64
          minimum: 1
          type: integer
        secret:
          maxLength: 8192
          type: string
          writeOnly: true
      required:
        - clientId
        - authMethod
      type: object
    ToolsetOAuthClientResponse:
      properties:
        client:
          allOf:
            - $ref: '#/components/schemas/ToolsetOAuthClient'
          nullable: true
          type: object
        redirectUri:
          format: uri
          type: string
      required:
        - redirectUri
        - client
      type: object
    OAuthClientAuthMethod:
      enum:
        - none
        - client_secret_basic
        - client_secret_post
      type: string
    ToolsetOAuthClient:
      properties:
        authMethod:
          $ref: '#/components/schemas/OAuthClientAuthMethod'
        clientId:
          type: string
        generation:
          format: int64
          minimum: 1
          type: integer
        updatedAt:
          format: date-time
          type: string
      required:
        - clientId
        - authMethod
        - generation
        - updatedAt
      type: object
    ErrorResponse:
      properties:
        attemptsRemaining:
          type: integer
        code:
          type: string
        error:
          type: string
        message:
          type: string
        retryAfterSeconds:
          type: integer
      required:
        - error
        - message
      type: object
  responses:
    BadRequest:
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
      description: Invalid request.
    NotFound:
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
      description: Resource not found.
    Conflict:
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
      description: Request conflicts with the thread's current state.
    CatalogUnavailable:
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
      description: Platform catalog database is not configured or unavailable.
  securitySchemes:
    APIKeyBearer:
      scheme: bearer
      type: http

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.