Manage extra allowed domains for OAuth-issued tokens.

Synopsis

oauth-domain <list|add|remove|clear> [providerId] [domain]

Description

Providers ship hardcoded oauthTokenDomains as immutable safe defaults; this command layers additional allow-listed domains on top, per provider.

Options

list List extra domains for every provider.

list <providerId> List extra domains for one provider.

add <providerId> <domain> Add an extra domain (e.g. admin.da.live).

remove <providerId> <domain> Remove an extra domain.

clear <providerId> Drop all extras for a provider.

--help Show this help.

Examples

$ oauth-domain add adobe admin.da.live

Allow OAuth tokens for the adobe provider to reach admin.da.live.

$ oauth-domain add adobe '*.da.live'

Allow a wildcard subdomain.

$ oauth-domain list adobe

List extra domains configured for the adobe provider.

Notes

Wildcards match subdomains only: '*.example.com' matches api.example.com but not example.com itself. Newly added domains apply on the next page reload; re-running oauth-token only re-saves a token if it is actually expired.

See Also

oauth-token, mcp