> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ontime.hosai.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Dynamic Client Registration (RFC 7591) for MCP connectors

> Dynamic Client Registration (RFC 7591) for MCP connectors (claude.ai, ChatGPT, Claude Desktop). UNAUTHENTICATED — any caller may register a public (no client secret) client. redirect_uris must be https (or http://loopback for native/dev clients) with no fragment.



## OpenAPI

````yaml /api-reference/openapi.json post /api/oauth/register
openapi: 3.1.0
info:
  title: ontime API
  description: APIs for ontime.v2
  version: 1.0.0
servers:
  - url: https://app.ontime.hosai.app
    description: Production
security:
  - apiKey: []
paths:
  /api/oauth/register:
    post:
      tags:
        - OAuth
      summary: Dynamic Client Registration (RFC 7591) for MCP connectors
      description: >-
        Dynamic Client Registration (RFC 7591) for MCP connectors (claude.ai,
        ChatGPT, Claude Desktop). UNAUTHENTICATED — any caller may register a
        public (no client secret) client. redirect_uris must be https (or
        http://loopback for native/dev clients) with no fragment.
      operationId: postApiOauthRegister
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                redirect_uris:
                  minItems: 1
                  maxItems: 10
                  type: array
                  items:
                    type: string
                client_name:
                  type: string
                  minLength: 1
                  maxLength: 200
              required:
                - redirect_uris
              additionalProperties: {}
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: object
                properties:
                  client_id:
                    type: string
                  client_name:
                    type: string
                  redirect_uris:
                    type: array
                    items:
                      type: string
                  token_endpoint_auth_method:
                    type: string
                    const: none
                  grant_types:
                    type: array
                    items:
                      type: string
                  response_types:
                    type: array
                    items:
                      type: string
                required:
                  - client_id
                  - client_name
                  - redirect_uris
                  - token_endpoint_auth_method
                  - grant_types
                  - response_types
components:
  securitySchemes:
    apiKey:
      type: http
      scheme: bearer
      bearerFormat: ont_ API key
      description: >-
        Issue keys in Settings → API. Send them as `Authorization: Bearer ont_…`
        (an `X-Api-Key: ont_…` header is also accepted). Session-cookie routes
        are used by the OnTime web apps and are shown for completeness.

````