---
updatedAt: 2025-05-14T20:40:28.000Z
agentTools:
  siteIndex: https://developers.klaxoon.com/llms.txt
  projectIndex: https://developers.klaxoon.com/klaxoon/llms.txt
---

# Create your App

Register Apps and manage API keys.

Klaxoon APIs use [OAuth 2.0](https://www.rfc-editor.org/rfc/rfc6749) access tokens to access resources.

The first step to getting an access token is to register your application using your Klaxoon account. If you don’t have an account you can Sign Up to create one.

1. Log in to the [MyApps](https://app.klaxoon.com/userspace/my-apps) page.

2. Click on the **create a new app using** to create an app

<Image align="center" className="border" border={true} src="https://files.readme.io/b7e4a83-create_an_app.png" />

3. Register your app with a **Name**, **Company Name**,  **Company website**, and **Short Description**. The application name must be unique among all Klaxoon applications.

<Image align="center" className="border" width="300px" border={true} src="https://files.readme.io/98d13cd-Create_a_new_app_modale.png" />

4. Set **Redirect URI for OAuth2**  that your app uses for authorizations. After a user authorizes your application, Klaxoon authorization server will redirect this user back to your application using this URL.

<Image align="center" className="border" width="300px" border={true} src="https://files.readme.io/169d925-redirtectURI.png" />

5. Set the **Permissions**. [Scopes](https://developers.klaxoon.com/docs/scopes) define the permissions your app requires. When users install your app, they are prompted to provide consent for the required scopes.

<Image align="center" className="border" width="300px" border={true} src="https://files.readme.io/3c2d8b4-scopes-2.png" />

6. If you are registering an App for the [Activity Picker](https://developers.klaxoon.com/docs/activity-picker) define the domains to be whitelisted. The Activity Picker allows users to select their Klaxoon Activities from  your Web app. It only run in domains in your allowlist.

7. Note your **App Credentials** you’ll use to get your access token. Client IDs are considered public and can be embedded in a web page’s source. The Client Secret is a secret known only to the OAuth Client and the Authorization Server.  Treat it as you would your password. You must keep it confidential and never expose it to users.

You can refer to the [Authorization Protocol](https://developers.klaxoon.com/docs/auditlog-introduction) for further details on the Authorization Code Grant Flow.

<Image align="center" className="border" width="300px" border={true} src="https://files.readme.io/3e167e7-credentials.png" />

Save your App to complete registration and you can then start using Klaxoon APIs.