Skip to main content

Get credentials

1

Register an application

Go to the Twitch Developer Console and click Register Your Application. Set the OAuth Redirect URL to:
Pick any category, Website Integration works for most apps.
2

Copy credentials

After saving, click Manage on the app. Copy the Client ID. Click New Secret to generate and copy the Client Secret.

Configuration

lib/kavach.ts

Endpoints

Scopes

Default scope: user:read:email

User data returned

The Twitch Helix API requires a Client-ID header on every request alongside the Bearer token. KavachOS handles this automatically, you do not need to set it manually.
Twitch email addresses may not be verified. Check the broadcaster_type and account age in the raw response if you need higher assurance.

OAuth overview

Generic OAuth configuration and custom provider setup.

Google

Another popular social provider with verified email addresses.

GitHub

Developer-focused OAuth provider with org membership scopes.

Reddit

Social provider in the same nav group.
Last modified on April 29, 2026