Merge pull request #526 from wchristian/oauth_docs

clarify the intended use of the oauth api call

1 files changed, 2 insertions, 0 deletions

diff --git a/docs/Using-the-API/API.md b/docs/Using-the-API/API.md
index 9f5280870..5d0c27ee8 100644
--- a/docs/Using-the-API/API.md
+++ b/docs/Using-the-API/API.md
@@ -212,6 +212,8 @@ Form data:
 
 Creates a new OAuth app. Returns `id`, `client_id` and `client_secret` which can be used with [OAuth authentication in your 3rd party app](Testing-with-cURL.md).
 
+These values should be requested in the app itself from the API for each new app install + mastodon domain combo, and stored in the app for future requests.
+
 ___
 
 ## Entities