Get client-scoped settings for a category.
curl --request GET \ --url https://auth.example.com/api/admin/clients/example/settings/example \ --header 'Authorization: Bearer <token>'Returns all settings in a category at client scope after checking that the category supports client overrides, the admin can view that category, and the client belongs to an accessible tenant.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Path Parameters
Section titled “Path Parameters ”Client identifier.
Settings category name that supports client scope.
Responses
Section titled “ Responses ”Settings v2 read response.
Settings v2 category read result returned by the settings manager. A value comes from the requested scope, else from the scopes it inherits from (a client’s tenant, then the platform, where the category allows those scopes), else from the deployment’s environment variable, else from the built-in default. sources says where each value came from, and inherited gives what each setting would be if the requested scope set nothing.
object
object
Version of the requested scope’s document, for optimistic concurrency.
Effective value of each setting at the requested scope.
object
Where each value came from. kv means it is set at the requested scope; tenant and platform mean it is inherited from that scope.
object
What each setting would be if the requested scope set nothing.
object
object
object
Example
{ "category": "oauth", "scope": { "type": "client", "id": "client_123", "tenantId": "tenant_123" }, "values": { "oauth.access_token_expiry": 300, "oauth.id_token_expiry": 900 }, "sources": { "oauth.access_token_expiry": "kv", "oauth.id_token_expiry": "tenant" }, "inherited": { "values": { "oauth.access_token_expiry": 900, "oauth.id_token_expiry": 900 }, "sources": { "oauth.access_token_expiry": "tenant", "oauth.id_token_expiry": "tenant" } }, "version": "v1"}Headers
Section titled “Headers ”Snapshot for the remote scheduled view; eventual when Pipeline visibility can lag ingestion; local_hot_only for local scheduled staging without a remote Catalog.
Tenant deliveries not yet confirmed visible. Omitted for self-service subjects. Zero does not guarantee immediate Pipeline visibility.
True only for a complete bounded snapshot query. Pipeline responses remain false; incomplete reads return 503.
Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}