> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# OAuth Apps

> Generate custom OAuth applications for client integrations.

The **OAuth Apps** tab allows you to generate a custom OAuth application for client integrations. It contains a list of available OAuth apps, including their application type and creation date.

<Frame>
  <img src="https://mintcdn.com/cdata/z1KLYCWnZisxWQoa/en/images/settings_oauth.png?fit=max&auto=format&n=z1KLYCWnZisxWQoa&q=85&s=11cbbc49801974a8bfd526ff6c415f9e" alt="Settings OAuth" width="1438" height="220" data-path="en/images/settings_oauth.png" />
</Frame>

## Create a Custom OAuth Application

To create a custom OAuth application:

<Steps>
  <Step>
    Click **+ Create App**. The **Create OAuth App** dialog appears.

    <Frame>
      <img src="https://mintcdn.com/cdata/L8b4Bjd7vM0bFf8g/en/images/settings_oauth_create.png?fit=max&auto=format&n=L8b4Bjd7vM0bFf8g&q=85&s=86f9c6a57a8a3499ed80256fcdd6dff8" alt="Create OAuth App" width="801" height="652" data-path="en/images/settings_oauth_create.png" />
    </Frame>
  </Step>

  <Step>
    Enter the **Name** of the OAuth app.
  </Step>

  <Step>
    Select the **Application Type** for your OAuth application.

    <Note>For service and automated applications, use [Service Accounts](/en/Service-Accounts) instead.</Note>

    * **Web Application**–select this option for service-side apps with a client secret Authorization Code grant. A client secret is required.
    * **Single Page App**–select this option for browser-based Authorization Code + PKCE grant. No client secret is required.
    * **CLI/Local Agent**–select this option for command-line tools. No client secret is required.
  </Step>

  <Step>
    Go to your client application and create a new application registration there. The client application will provide a callback URL.
  </Step>

  <Step>
    Return to the **Create OAuth App** dialog in Connect AI and paste the **Callback URL** from the client application. This URL redirects users after login. You can provide up to 10 callback URLs for your OAuth app.
  </Step>

  <Step>
    Click **Confirm**. Connect AI creates the OAuth app and generates a **Client Id** and **Client Secret** for the client application. Copy these values.

    <Frame>
      <img src="https://mintcdn.com/cdata/z1KLYCWnZisxWQoa/en/images/settings_oauth_clientidsecret.png?fit=max&auto=format&n=z1KLYCWnZisxWQoa&q=85&s=ce7c7652ad449cb7ef9bf9cee98fe315" alt="OAuth App Client Id and Secret" width="1460" height="534" data-path="en/images/settings_oauth_clientidsecret.png" />
    </Frame>
  </Step>

  <Step>
    Return to the client application and paste the **Client Id** and **Client Secret** in the appropriate fields. For example, in Gemini Enterprise:

    <Frame>
      <img src="https://mintcdn.com/cdata/4FwGiNFIages-Ark/en/images/gemini_enterprise_datastore_auth.png?fit=max&auto=format&n=4FwGiNFIages-Ark&q=85&s=d90e377953390dc6fe849269195711b2" alt="Client Id and Client Secret" width="3024" height="1724" data-path="en/images/gemini_enterprise_datastore_auth.png" />
    </Frame>
  </Step>

  <Step>
    The new OAuth app appears in the list of apps. Click the edit icon (<Icon icon="pencil" />) to edit the app and add more callback URLs for other client applications, if needed.
  </Step>
</Steps>

Your external system might ask for information about the CData authorization, token, and registration URLs. They are as follows:

| Endpoint                      | Value                                                                                  |
| :---------------------------- | :------------------------------------------------------------------------------------- |
| **Authorization URL**         | [https://cloud-login.cdata.com/authorize](https://cloud-login.cdata.com/authorize)     |
| **Token URL**                 | [https://cloud-login.cdata.com/oauth/token](https://cloud-login.cdata.com/oauth/token) |
| **Registration URL**          | [https://mcp.cloud.cdata.com/register](https://mcp.cloud.cdata.com/register)           |
| **Authorization server base** | [https://mcp.cloud.cdata.com](https://mcp.cloud.cdata.com)                             |
| **Resource**                  | [https://mcp.cloud.cdata.com/mcp](https://mcp.cloud.cdata.com/mcp)                     |