Skip to content
BrokerrBrokerr

Custom OAuth apps

Custom mode is optional for AniList and TMDB. Letterboxd currently requires the hosted gateway.

AniList

Section titled “AniList”

Create an AniList API client, register the HTTPS redirect URI shown by Brokerr, then enter client ID, client secret, and redirect URI after selecting Direct / custom. Brokerr performs the provider flow through generic /api/v2 auth endpoints and encrypts the resulting access token locally.

TMDB

Section titled “TMDB”

Create a TMDB application and provide the API Read Access Token, API key, and redirect URI shown by Brokerr. TMDB account approval produces the account/session credentials used for watchlist, rating, and V4 list operations.

Secret handling

Section titled “Secret handling”

Custom application secrets are target-instance credentials. API responses report only credential key names and never return values. Disconnecting the user account preserves custom app settings, while deleting the target removes them.

Use HTTPS, keep provider secrets out of screenshots and logs, and back up the master key separately from the database. Without the matching key, encrypted credentials cannot be restored.