Applications

Use this API to manage instance-wide OAuth applications that:

You cannot use this API to manage group applications or individual user applications.

Get applications

GET /api/v4/applications

List all registered applications

Responses

Code	Description	Schema
`200`	OK	APIEntitiesApplication
`401`	Unauthorized	—
`403`	Forbidden	—

List all applications

GET /api/v4/user/applications

Lists all applications owned by the authenticated user.

Responses

Code	Description	Schema
`200`	OK	APIEntitiesApplication
`401`	Unauthorized	—
`403`	Forbidden	—

Create an application

POST /api/v4/user/applications

Creates a new OAuth application for the authenticated user. This feature was introduced in GitLab 19.0

Request body (application/json)

Property	Type	Description
`confidential`	Boolean	If `true`, the application can securely store client credentials, such as the client secret. Non-confidential applications, such as native mobile apps and Single Page Apps might expose client credentials. If unset, defaults to `true` Default: `true`
`name` Required	String	Name of the application Example: `MyApplication`
`redirect_uri` Required	String	Redirect URI of the application Example: `https://redirect.uri`
`scopes` Required	String	Scopes available to the application. Separate multiple scopes with a space

Responses

Code	Description	Schema
`201`	Created	APIEntitiesApplicationWithSecret
`400`	Bad Request	—

Retrieve an application

GET /api/v4/user/applications/{id}

Retrieves details of a specific application owned by the authenticated user.

Parameters

Name	Type	Description
`id` Path, required	Integer	ID of the application. Differs from the `application_id`

Responses

Code	Description	Schema
`200`	OK	APIEntitiesApplication
`400`	Bad Request	—
`404`	Not Found	—

Update an application

PUT /api/v4/user/applications/{id}

Updates an existing application owned by the authenticated user.

Parameters

Name	Type	Description
`id` Path, required	Integer	ID of the application. Differs from the `application_id`

Request body (application/json)

Property	Type	Description
`name`	String	Name of the application
`scopes`	String	Scopes available to the application. Separate multiple scopes with a space

Responses

Code	Description	Schema
`200`	OK	APIEntitiesApplication
`400`	Bad Request	—
`404`	Not Found	—

Delete an application

DELETE /api/v4/user/applications/{id}

Deletes a specified application owned by the authenticated user.

Parameters

Name	Type	Description
`id` Path, required	Integer	ID of the application. Differs from the `application_id`

Responses

Code	Description	Schema
`204`	No Content	—
`400`	Bad Request	—
`404`	Not Found	—

Schemas

Objects returned by the operations above and objects nested in their request bodies.

APIEntitiesApplication

Property	Type	Description
`application_id`	String	Example: `5832fc6e14300a0d962240a8144466eef4ee93ef0d218477e55f11cf12fc3737`
`application_name`	String	Example: `MyApplication`
`callback_url`	String	Example: `https://redirect.uri`
`confidential`	Boolean	Example: `true`
`id`	Integer (int64)	Example: `1`
`scopes`	Array	Example: `["api","read_user"]`

APIEntitiesApplicationWithSecret

Property	Type	Description
`application_id`	String	Example: `5832fc6e14300a0d962240a8144466eef4ee93ef0d218477e55f11cf12fc3737`
`application_name`	String	Example: `MyApplication`
`callback_url`	String	Example: `https://redirect.uri`
`confidential`	Boolean	Example: `true`
`id`	Integer (int64)	Example: `1`
`scopes`	Array	Example: `["api","read_user"]`
`secret`	String	Example: `ee1dd64b6adc89cf7e2c23099301ccc2c61b441064e9324d963c46902a85ec34`

Get applications

List all applications

Create an application

Retrieve an application

Update an application

Delete an application

Schemas

APIEntitiesApplication

APIEntitiesApplicationWithSecret

Request trial access

Thank you

Error

Request callback

Thank you

Something went wrong

Book your sessions

Thank you

Error

Request demo

Thank you

Error

Get the PCI SSC Compliance Report

Thank you

Error