App registry

Register OAuth clients and keep sandbox and live apps separated.

The server-side developer workspace remains the system of record for client credentials and redirect URIs.

Open registry Developer sign in

Capabilities

What app setup covers

Sandbox OAuth client registration
Redirect URI management
Environment separation
Schema and docs gating
Production approval handoff

Environments

How to split your clients

One OAuth client for sandbox integration work.
A separate reviewed client for production traffic.
Redirect URIs must match the approved frontend host.
GraphQL and REST both inherit the same bearer token.

OAuth2

Developer console

Open the registered app workspace on Retrieve server.

Docs

Review auth contract

Use OIDC discovery and the schema explorer before creating your client.