This plugin adds a first-party OAuth 2.0 Authorization Server to Matomo, allowing external applications to securely access Matomo APIs using OAuth2 access tokens instead of token_auth.
It supports standard OAuth 2.0 flows including Authorization Code (PKCE), Client Credentials, and Refresh Token.
The OAuth 2.0 plugin replaces static authentication with a token-based flow tied to your existing login system. Each application requests permission, receives scoped access, and operates within defined limits. No need to distribute or manage long-lived credentials across tools and services.
Tokens expire by default, can be refreshed when needed, and revoked instantly without affecting other integrations. This reduces exposure and simplifies access management.
For teams running multiple integrations, OAuth 2.0 is the practical choice for secure, maintainable access to Matomo data. Every connection is authorised, bounded, and straightforward to control.
The OAuth 2.0 User Guide and the README.md cover how to get the most out of this plugin.
-
List Clients
-
Create Client
-
Edit Client
-
List Clients
-
Pause a Client
-
Resume a client
