Objective
This article shows you how to create an OAuth client so an AI agent can request authorization to act on your users' behalf, and how to safely capture the client secret you are issued.
Product
Identity for AI Agents
Environment
Twilio Console
Procedure
- In the Twilio Console, select Identity & security in the left sidebar.
- Select Identity for AI Agents, then Clients.
- Select Create a new client.
- In the Create new window, fill in:
- Name, a name for the client.
- Application type, First Party for trusted applications your organization owns, which will not require end-user consent, or Third Party for external applications, which will.
- Authentication type, Confidential for applications that can securely store a secret, where Proof Key for Code Exchange (PKCE) is optional, or Public for applications that cannot, such as native mobile or desktop apps, where PKCE is required.
- Allowed scopes, the OAuth scopes this client is permitted to request, chosen from your custom scopes.
- Select Create.
- For a confidential client, a window shows your Client secret. Copy it and store it somewhere safe, then tick the confirmation that you have saved it and continue.
- The client's details page opens, showing its Client ID and configuration.
Additional Information
The client secret is shown once and can never be retrieved again. If you lose it, open the client and select Edit to create a replacement.
Newly created clients have no redirect URLs. If the client uses a redirect-based grant type, its details page shows Add a Redirect URL until you add one, open Edit to add it.
Define the scopes you need on the Custom Scopes page before creating a client, so they are available to select here.
The clients table may take a few seconds to reflect a new client.
This content was generated by AI and reviewed, edited, and verified by a human.