App Integration: Let Users Authorize Your Application

2026-11-09 · 原创·功能教程

Use case

App integration lets end users explicitly authorize your application to call models and inspect app-scoped usage. It never shares their platform password.

Integration steps

1. Create an application and register exact redirect URIs.

2. Use PKCE S256 for public clients and request only required scopes.

3. After user consent, exchange the code for tokens on your server.

4. Call ext with an authorized model ID or tier. Balance and usage require separate scopes.

Security

Never expose ext tokens in browser code. Stop calls after revocation. In tier-only display mode, do not recover real model IDs from other APIs.