← Back to glossary
Glossary

PKCE (Proof Key for Code Exchange)

Reviewed 20 March 2026 Canonical definition

An extension to the OAuth 2.0 authorization code flow that prevents authorization code interception attacks. Essential for public clients like AI agents that cannot securely store client secrets.