The agent asking for access

GET

/api/v1/oauth/client

const url = 'https://api.crossmart.io/api/v1/oauth/client?clientId=example';
const options = {
  method: 'GET',
  headers: {cookie: 'better-auth.session_token=<better-auth.session_token>'}
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://api.crossmart.io/api/v1/oauth/client?clientId=example' \
  --cookie better-auth.session_token=<better-auth.session_token>

Its name, and what of it Crossmart could verify: the host of a Client ID Metadata Document, or nothing for an agent that registered itself. Signed-in users only.

Authorizations

cookie

Parameters

Query Parameters

clientId

required

string

<= 2048 characters

The client_id of the authorization request

Responses

200

application/json

object

clientId

required

The OAuth client id: a Client ID Metadata Document URL, or a registered id

string

name

required

The name to show. Verified only for a metadata_document client, through verifiedHost; a dynamic client chose it itself, and any client can call itself “Claude”.

string

registration

required

metadata_document: Crossmart fetched the agent’s metadata from its HTTPS client id. dynamic: the agent registered itself, and its name and site are unverified.

string

Allowed values: metadata_document dynamic

verifiedHost

required

For a metadata_document client: the host its metadata came from

string

nullable

claimedHost

required

For a dynamic client: the HTTPS host of the site it claims. Not verified.

string

nullable

Example

{
  "registration": "metadata_document",
  "verifiedHost": "claude.ai"
}

404

No such agent, or it is disabled