{
  "node_id": "ietf-rfc-7591-oauth-2-0-dynamic-client-registration",
  "title": "IETF RFC 7591 OAuth 2.0 Dynamic Client Registration Protocol - Client Metadata Registration Endpoint Initial Access Tokens Software Statement and Self-Service Client Provisioning",
  "domain": "Workflow Automation",
  "version": "1.0.0",
  "last_updated": "2026-05-29T00:00:00Z",
  "bluf": "IETF RFC 7591 specifies the OAuth 2.0 Dynamic Client Registration Protocol enabling clients to register with an OAuth 2.0 authorization server at runtime instead of through manual configuration covering client metadata fields including redirect_uris token_endpoint_auth_method grant_types and response_types as optional unless stated otherwise, the client registration request as an HTTP POST with JSON-encoded parameters to the registration endpoint optionally bearing an initial access token for authorized registration scenarios, the client information response returning HTTP 201 with the assigned client_id optional client_secret and all registered metadata, error responses using HTTP 400 with JSON error objects including invalid_redirect_uri invalid_client_metadata and invalid_software_statement, security considerations mandating TLS 1.2 transport protection and restricting registered redirect URI values to TLS-protected web sites local-machine HTTP URIs or non-HTTP application-specific URLs, and enables self-service registration for distributed agent systems where deployment details are unknown at build time.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "industry_mapping",
      "framework_alignment"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "ietf-rfc-6749-oauth-2-0-authorization-framework-2012",
    "ietf-rfc-8414-oauth-2-0-authorization-server-metadata-2018"
  ],
  "primary_citations_count": 8
}