OAuth Dynamic Client Registration - Automation 360 supports OAuth Dynamic Client Registration (DCR) for Automation 360 Cloud deployments, which enables applications to programmatically register as OAuth clients with the Automation 360 server.

Automation 360

Automation 360 supports OAuth Dynamic Client Registration (DCR) for Automation 360 Cloud deployments, which enables applications to programmatically register as OAuth clients with the Automation 360 server.

Dynamic Client Registration eliminates the need to manually create an OAuth client in Control Room, making it useful for applications such as MCP clients.

For example, an MCP client can dynamically register with the Automation 360 server instead of requiring an administrator to do so manually.
Note: If your application does not support DCR, register the OAuth client manually in Control Room. See Register OAuth clients manually.

Dynamically registered OAuth clients can use supported OAuth flows, such as Authorization Code with PKCE, to obtain authorization to access Automation 360 resources.

Before you begin

Ensure that your user role includes one of the following Control Room permissions:
  • Application Registration View – to view existing OAuth clients.
  • Application Registration Manage – to create, update, and delete OAuth clients.

Automation 360 Dynamic Client Registration workflow

When using Dynamic Client Registration:

  1. The user provides the Automation 360 Dynamic Client Registration endpoint URL. For example: https://<your-control-room-url>/mcp.
  2. The client application sends the required registration metadata to this endpoint on behalf of the user. The client sets the metadata, which includes fields such as:
    • Client/application name
    • Redirect URI
    • Supported grant type
    • Response type
    Note: Some client applications allow users to configure certain metadata fields before registration. Refer to your client application's documentation for details.
  3. Automation 360 server validates the registration request.
  4. Automation 360 registers the OAuth client and returns the required client information and metadata.
    Note: Store client credentials or other sensitive information returned during registration securely.

    All clients registered using DCR can be viewed and managed on the Manage > OAuth clients page. See View and manage OAuth clients.

    OAuth clients listed in this page

After successfully registering the client, the OAuth client can access the permitted Automation 360 resources using the supported OAuth authorization flow.