{
"client-id": "app.example.com",
"client-secret": "{{client_secret}}",
"redirect-uri": "https://app.example.com/oauth/callback",
"notes": "The client secret is shown here on create. It is returned masked from now on; include-secret=yes reads it back whole."
}