> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Configure client credential grants

For each resource server you define, you can configure OIDC and OAuth Web and Server applications to request a JWT access token by using the client credentials grant. The client application uses this token to call the resource server API directly.

To configure this, select the application and then define the scopes that the application can request.

## Configure client credential grants

1. Click Menu icon **>** **Security > Resource Server**. The **Resource Server** page appears.
2. Select **API/URL**. The **APIs/URLs** list appears.
3. Under **Actions**, click **+** next to the API/URL. The **Add Client Credentials Grant** page appears.
4. Click **Add**. The **Add Client Credentials Grant** dialog box appears.
5. Select the **OIDC Application** from the drop-down list.
6. Select the **Authorization Scopes** for the list of scopes that can be requested to be part of the issued access token for the client credential grant.
7. Click **Add**.
8. Click **Save** on the **Client Credentials Grant** page.

The client credential grant is now available for the selected application and scopes.

## Edit or delete a client credential grant

Use the following, as required, to edit or delete a client credential grant.

- Editing a grant updates the scopes available to new token requests.
- Existing access tokens remain valid until they expire.

### Edit a client credential grant

1. Click Menu icon **>** **Security > Authorization**. The **Authorization** page appears.
2. Select **API/URL**. The **APIs/URLs** list appears.
3. Click Circle Plus icon next to the API/URL. The **Edit Client Credentials Grant** page appears.
4. Make the required changes.
5. Click **Save**.

### Delete a client credential grant

1. Click Menu icon **>** **Security > Authorization**. The **Authorization** page appears.
2. Select **API/URL**. The **APIs/URLs** list appears.
3. Locate the client credential grant and click Trash icon.
4. Confirm deletion.

warning

Deleting a client credential grant prevents new access tokens from being issued for that application and scope combination.