Delete application legacy secret

Add MCP server to your AI tool

Allow AI tools and LLMs to interact with the API documentation portal through MCP.

MCP server URL


        
          
            https://openapi.logto.io/mcp

Standard setup for AI tools providing an mcp.json file

{
  "Logto API references MCP server": {
    "url": "https://openapi.logto.io/mcp"
  }
}

DELETE /api/applications/{id}/legacy-secret

O auth2

Delete the legacy secret for the application and replace it with an internal secret used only by Logto. The internal secret is not returned by Management APIs and cannot be used for client authentication.

Path parameters

id string Required

The unique identifier of the application.

Responses

200 application/json

The legacy secret was deleted successfully.
Hide response attributes Show response attributes object
- tenantId string Required
  
  Maximum length is 21.
- id string Required
  
  Minimum length is 1, maximum length is 21.
- name string Required
  
  Minimum length is 1, maximum length is 256.
- secret string
  
  Minimum length is 1, maximum length is 64.
- description string | null Required
- type string Required
  
  Values are Native, SPA, Traditional, MachineToMachine, Protected, or SAML.
- oidcClientMetadata object Required
  
  Hide oidcClientMetadata attributes Show oidcClientMetadata attributes object
  
  redirectUris array[object] Required
  
  Validator function
  
  Validator function
  
  Validator function
  
  Additional properties are allowed.
  
  postLogoutRedirectUris array[object] Required
  
  Validator function
  
  Validator function
  
  Validator function
  
  Additional properties are allowed.
  
  backchannelLogoutUri string(url)
  
  backchannelLogoutSessionRequired boolean
  
  logoUri string
- customClientMetadata object Required
  
  Hide customClientMetadata attributes Show customClientMetadata attributes object
  
  corsAllowedOrigins array[string]
  
  Minimum length of each is 1.
  
  idTokenTtl number
  
  refreshTokenTtl number
  
  refreshTokenTtlInDays number
  
  tenantId string
  
  alwaysIssueRefreshToken boolean
  
  rotateRefreshToken boolean
  
  allowTokenExchange boolean
  
  isDeviceFlow boolean
  
  maxAllowedGrants number
- protectedAppMetadata object | null Required
  
  Hide protectedAppMetadata attributes Show protectedAppMetadata attributes object | null
  
  host string Required
  
  origin string Required
  
  sessionDuration number Required
  
  pageRules array[object] Required
  
  Hide pageRules attribute Show pageRules attribute object
  
  path string Required
  
  additionalScopes array[string]
  
  Values are custom_data, identities, roles, urn:logto:scope:organizations, or urn:logto:scope:organization_roles.
  
  customDomains array[object]
  
  Hide customDomains attributes Show customDomains attributes object
  
  domain string Required
  
  status string Required
  
  Values are PendingVerification, PendingSsl, Active, or Error.
  
  errorMessage string | null Required
  
  dnsRecords array[object] Required
  
  Hide dnsRecords attributes Show dnsRecords attributes object
  
  name string Required
  
  type string Required
  
  value string Required
  
  cloudflareData object | null Required
  
  Hide cloudflareData attributes Show cloudflareData attributes object | null
  
  id string Required
  
  status string Required
  
  ssl object Required
  
  Hide ssl attributes Show ssl attributes object
  
  status string Required
  
  validation_errors array[object]
  
  Hide validation_errors attribute Show validation_errors attribute object
  
  message string Required
  
  verification_errors array[string]
- customData object Required
  
  arbitrary
  
  Additional properties are allowed.
- isThirdParty boolean Required
- appLevelAccessControlEnabled boolean Required
- createdAt number Required
400

The application does not have a legacy secret.
401

Unauthorized
403

Forbidden
404

Not Found

DELETE /api/applications/{id}/legacy-secret

curl \
 --request DELETE 'https://[tenant_id].logto.app/api/applications/{id}/legacy-secret' \
 --header "Authorization: Bearer $ACCESS_TOKEN"

Response examples (200)

{
  "tenantId": "string",
  "id": "string",
  "name": "string",
  "secret": "string",
  "description": "string",
  "type": "Native",
  "oidcClientMetadata": {
    "redirectUris": [
      {}
    ],
    "postLogoutRedirectUris": [
      {}
    ],
    "backchannelLogoutUri": "string",
    "backchannelLogoutSessionRequired": true,
    "logoUri": "string"
  },
  "customClientMetadata": {
    "corsAllowedOrigins": [
      "string"
    ],
    "idTokenTtl": 42.0,
    "refreshTokenTtl": 42.0,
    "refreshTokenTtlInDays": 42.0,
    "tenantId": "string",
    "alwaysIssueRefreshToken": true,
    "rotateRefreshToken": true,
    "allowTokenExchange": true,
    "isDeviceFlow": true,
    "maxAllowedGrants": 42.0
  },
  "protectedAppMetadata": {
    "host": "string",
    "origin": "string",
    "sessionDuration": 42.0,
    "pageRules": [
      {
        "path": "string"
      }
    ],
    "additionalScopes": [
      "custom_data"
    ],
    "customDomains": [
      {
        "domain": "string",
        "status": "PendingVerification",
        "errorMessage": "string",
        "dnsRecords": [
          {
            "name": "string",
            "type": "string",
            "value": "string"
          }
        ],
        "cloudflareData": {
          "id": "string",
          "status": "string",
          "ssl": {
            "status": "string",
            "validation_errors": [
              {
                "message": "string"
              }
            ]
          },
          "verification_errors": [
            "string"
          ]
        }
      }
    ]
  },
  "customData": {},
  "isThirdParty": true,
  "appLevelAccessControlEnabled": true,
  "createdAt": 42.0
}