OAuth lets a third-party application request selected access without receiving your hosting password.
Step by step
- On the authorization page, check the application name and requested permissions.
- For server access, select only the intended eligible server and appropriate rights.
- Review or revoke connected applications from Settings and server Permissions.
- As a developer, open the Developer portal through Settings and follow the public OAuth documentation for application setup.
Check the result
Applications are labeled separately from human collaborators. Regenerating an application secret requires updating your integration.
Important
Authorize only applications you trust. Keep client secrets on the backend, not in a public browser script or repository.