Dry-run the saved OAuth 2.0 client-credentials config

Exchange the saved client_credentials at the token endpoint and discard the resulting access token. Returns success + latency on a 2xx exchange, or the SDK’s ClientCredentialsExchangeError kind (oauth, malformed, network) on failure so operators get same-second feedback instead of waiting for the next compliance heartbeat. Requires authentication and ownership. Requires credentials to already be saved via PUT /oauth-client-credentials.

POST /api/registry/agents/{encodedUrl}/oauth-client-credentials/test

Dry-run the saved OAuth 2.0 client-credentials config

cURL

curl --request POST \
  --url https://agenticadvertising.org/api/registry/agents/{encodedUrl}/oauth-client-credentials/test \
  --header 'Authorization: Bearer <token>'

200

{
  "latency_ms": 123
}

Authorizations

bearerAuthoauth2

Authorization · string · header · required

Bearer token in the Authorization header. Two token types are accepted:

• Organization API key (sk_...) issued via the dashboard. Org-scoped, long-lived, for server-to-server use.
• User JWT obtained via the OAuth 2.1 authorization code flow with PKCE. User-scoped, short-lived. Discover the authorization server at /.well-known/oauth-authorization-server and the protected-resource metadata at /.well-known/oauth-protected-resource/api.

Path Parameters

encodedUrl · string · required

URL-encoded agent URL

Response

200

application/json

Result of the token exchange. ok: true on 2xx from the AS; ok: false with a typed error otherwise (HTTP response itself is still 200 — the error payload carries the rejection kind so UI can branch on it).

Option 1

Option 2

ok · enum<boolean> · required

Available options: true

latency_ms · integer · required