Dynamic Client Registration

Dynamic Client Registration (DCR)

DCR allows Gemini Enterprise to programmatically register as an OAuth 2.0 client. This eliminates the need for manual credential exchange.

DCR Endpoint

URL: https://agent.stactize.com/dcr

Method: POST

Authentication: None (public endpoint; security is via JWT validation)

DCR Flow

1. Gemini Enterprise sends a POST request containing a software_statement JWT signed by Google
2. The agent validates the JWT:
   • Verifies the RS256 signature using Google's public keys
   • Confirms the issuer is Google's Marketplace service account
   • Checks the JWT hasn't expired
   • Validates the audience matches the agent's provider URL
   • Extracts the Marketplace Order ID and Procurement Account ID
3. On successful validation, the agent returns pre-configured OAuth 2.0 credentials

Request Format

{
  "software_statement": "<google_signed_jwt>"
}

JWT Claims (Inside software_statement)

Response Format

{
  "client_id": "<oauth_client_id>",
  "client_secret": "<oauth_client_secret>",
  "client_secret_expires_at": 0
}

Error Responses