Proof

Delete an OAuth Client Application or Secret – Proof Help Center

The Proof Help Center guide explains that only organization owners or admins can immediately delete an OAuth client application or revoke a client secret—actions that disable authentication for all integrations using those credentials—and recommends rotating secrets instead of deleting active applications, providing step-by-step instructions and warnings about the irreversible impact on connected systems.

Audience: Organizations

The short answer: Here's how to delete an OAuth client application or revoke a client secret. Only organization owners and admins (or users with appropriate API/developer permissions) can perform these actions. OAuth is a paid feature — contact your Customer Success Manager (CSM) or Sales team to enable it.

Warning:

Deletion is immediate and cannot be undone. Deleting a client application or revoking a secret immediately disables authentication for any integrations using those credentials. In most cases, rotating or replacing a secret is preferred over deleting an active application. If an integration still requires access, generate and configure a new client secret before revoking the existing one.

Delete a client application

  1. 1.Select Settings from the navigation on the left.
  2. 2.Select OAuth from the Settings page menu.
  3. 3.Select Delete next to the client application you want to delete.
  4. 4.Review the warning message carefully.
  5. 5.Select the button to confirm deletion.

Warning:

Any systems, APIs, middleware, or integrations using the deleted OAuth client application will immediately fail authentication.

Revoke an app secret

  1. 1.Select Settings from the navigation on the left.
  2. 2.Select OAuth from the Settings page menu.
  3. 3.Select View client application next to the one you'd like to open.
  4. 4.Select the trash icon next to the secret you'd like to revoke.
  5. 5.Select the button in the pop-up window to confirm deletion.

Warning:

Any application or integration using the revoked secret will immediately fail authentication until it is updated with a valid secret.

Troubleshooting

  • Integration stopped working after deletion → verify the external system has been updated with the new OAuth credentials.
  • Deleted OAuth secrets cannot be recovered — a new secret must be generated and configured.
  • Deleting a client application or secret does not remove existing transactions or audit history.

Summary Checklist

  • Confirm replacement credentials are configured and tested before deleting or revoking.
  • Delete app: Settings → OAuth → Delete → review warning → confirm.
  • Revoke secret: Settings → OAuth → View client application → trash icon → confirm.
  • Deletion is immediate and irreversible — affected integrations will fail authentication instantly.

Still unsure? Contact Proof Support for help.