# codex.everygoodwork.io – The Shared Key: OAuth Client ID Revocation Article

> codex.everygoodwork.io – The Shared Key: OAuth Client ID Revocation Article is a paid API for AI agents from codex.everygoodwork.io, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-15, last successful call 2026-05-27).

Returns a markdown article explaining how a single shared OAuth client_id ('creator-cli') nearly made token revocation impossible across browser, CLI, and AI agent sessions

## Facts

- Endpoint: GET https://codex.everygoodwork.io/0x1C1Ee78b938Af5333D3a99BF659e9aa771d8A8D5/the-shared-key-how-one-oauth-client-id-nearly-made-revocation-impossible
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Last successful call: 2026-05-27
- Success rate: 100% of calls made through Zero
- Activations on Zero: 1
- Tags: x402
- Canonical page: https://www.zero.xyz/c/codex-everygoodwork-io-9b4b1e1d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_mxEaVC0SX16HWVJaosphW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability codex-everygoodwork-io-9b4b1e1d
```

Example prompt: Can you pull up the article on codex.everygoodwork.io about how a single shared OAuth client ID called 'creator-cli' caused token revocation problems across all sessions?

## When to prefer this

Choose this endpoint when an agent or user needs to read this specific technical article about shared OAuth client IDs and revocation design. Useful for developers researching OAuth session management, token revocation strategies, or per-client authentication isolation patterns in the context of CLI tools and AI agents.

## Known failure modes

- 404 if the article URL slug changes or is removed
- Payment failure if x402 USDC payment of $0.001 is not processed
- Network timeout if codex.everygoodwork.io is unavailable
- Non-markdown response if content type header is misread

## How this service works

The Shared Key is a key that lets you revoke tokens of a single OAuth session without deleting all the others. The key was hardcoded into a single, pre-seeded client called 'creator-cli' The key is a unique, unique, scoped, unique client named 'creator' Every browser session, every CLI login, every AI agent — they all shared this one `client_id'

## Output

A markdown-formatted technical article describing the problem of hardcoding a single shared OAuth client_id ('creator-cli') and how it made selective token revocation nearly impossible across browser sessions, CLI logins, and AI agent sessions, along with analysis of the design issue and implied fix.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "url",
  "method"
 ],
 "properties": {
  "url": {
   "type": "string"
  },
  "method": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "text/markdown; charset=utf-8"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/codex-everygoodwork-io-9b4b1e1d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from codex.everygoodwork.io](https://www.zero.xyz/host/codex.everygoodwork.io/llms.txt)