AUTHOMETRY FIELD MANUAL
Follow the request. Find the decision.
Configure clients, implement supported OAuth flows, and operate each environment with the same exact inputs Authometry records in its authorization traces.
Start
Getting started
Provision an Authometry Cloud OAuth client from your application with the CLI.
Start
Applications
Choose a client type, register exact URLs, assign grants, and rotate credentials.
OAuth and OIDC
Authorization Code with PKCE
Bind an authorization request to a one-time verifier using the S256 challenge method.
OAuth and OIDC
Redirect URI matching
Understand exact callback matching and fix redirect_uri_mismatch safely.
OAuth and OIDC
Token endpoint
Authenticate the client and exchange each supported grant using form-encoded requests.
OAuth and OIDC
Device Authorization
Authorize a device on a second screen without placing user credentials on the device.
Operate
MCP server
Connect an AI client to inspect and manage Authometry with separately approved read and write access.
Operate
Configuration as code
Validate, review, and atomically apply authometry.dev/v1alpha1 manifests.
Operate
Account provisioning
Synchronize Authometry users into connected services with signed lifecycle events.
Operate
Webhook verification
Verify signed audit-event deliveries and apply side effects exactly once.
Operate
Errors and traces
Move from a stable error code to the failed validation step and its corrective action.