Guides · social · Popular APIs

Twitch Developer application (Helix API)

Register an application in the Twitch Developer Console (2FA required) to get a client ID and client secret for OAuth and the Twitch API.

Researched · not yet run liveLast researched 25 October 2026 · Twitch · provider site

Researched, not yet run live. Built from the provider’s official pages (linked below). A person hasn’t walked this flow end to end yet, so check each step against the source.

Who owns what

A Twitch user account (with verified email and 2FA) owns applications registered in the Developer Console.

  • Twitch user account personal owned by the personEmail must be verified and two-factor authentication enabled before registering an app.
  • Registered application developer owned by the person or company · under Twitch user accountHolds the client ID, client secret and OAuth redirect URLs.

Organisation ownership of apps (Twitch Developer organisations) is not covered in the pages reviewed. [to verify]

Have ready

  • A Twitch account with a verified email address: The register-app guide says to verify your email first.
  • The OAuth redirect URL(s) your app will use (for example http://localhost:3000 for development): Redirect URLs are entered when registering the app. [to verify] whether non-HTTPS localhost is accepted.
  • A phone or authenticator app for Twitch two-factor authentication · Twitch requires 2FA on the account before you can register an application. [1]Needed for: Enable two-factor authentication

Steps

Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.

  1. Log in to the Twitch Developer Console

    Log in at dev.twitch.tv/console with your Twitch account. If you have no account you create it yourself; verapli does not create accounts. Verify your email first.

    • Guided by hand
    • Human step: You sign in

    Where: https://dev.twitch.tv/console

  2. Enable two-factor authentication

    In Twitch Security and Privacy settings, turn on two-factor authentication, then refresh the console.

    • Guided by hand
    • Human step: You enter a 2-step code
    • After: Log in to the Twitch Developer Console

    Where: https://www.twitch.tv/settings/security

  3. Review the Developer Services Agreement

    Read the Twitch Developer Services Agreement, which governs use of Twitch APIs and Twitch Data, before registering an application.

    • Guided by hand
    • Human step: You accept the terms
    • After: Log in to the Twitch Developer Console

    Where: https://legal.twitch.com/en/legal/developer-agreement/

  4. Register your application

    In Applications, click Register Your Application. Enter a name unique across all Twitch applications, add your OAuth Redirect URLs (click Add for each), pick a Category, complete the CAPTCHA and click Create. Then open Manage and copy the Client ID.

    • Guided by hand
    • Human step: You solve a CAPTCHA
    • After: Enable two-factor authentication, Review the Developer Services Agreement

    verapli captures TWITCH_CLIENT_ID here by plain code: encrypted in your browser, never shown to AI.

    If something goes wrong (2)
    • Register Your Application is unavailable or errors: Make sure 2FA is enabled on the account and refresh the console. [1]
    • Name rejected: The name must be unique among all Twitch applications; choose another. [1]

    Where: https://dev.twitch.tv/console/apps

  5. Generate a client secret

    On the app's Manage page, click New Secret and copy it straight away; verapli writes it to your env file. Generating a new secret invalidates the previous one.

    • Guided by hand
    • Human step: You press submit
    • After: Register your application

    verapli captures TWITCH_CLIENT_SECRET here by plain code: encrypted in your browser, never shown to AI.

    Where: https://dev.twitch.tv/console/apps

Terms and gotchas

Plain-English summary, not legal advice. Each card links its source.

Can get you bannedThe rules say

No selling or sharing Twitch Data

Twitch Data, including data you collect about Twitch end users and insights derived from it, may not be sold, licensed, monetised, distributed for commercial purposes or shared with affiliates or third parties without Twitch's prior written permission. Transferring end user data to ad networks or data brokers is prohibited. [to verify] exact section numbers against the live agreement. [3]

Can cost moneyThe rules say

Commercial and marketing uses may need a separate agreement

Twitch will consider authorising certain activities, including marketing services, only under a separate agreement and approval process. Using end users' channel content to promote a commercial product needs those users' authorisation. [to verify] [3]

Worth knowingThe rules say

Extension monetisation is a separate programme

Earning from Bits in Extensions requires the separate Twitch Extensions Developer Agreement; Bits revenue is shared between the broadcaster and the developer. [4]

Worth knowingThe rules say

Rate limits

The API uses a per-minute token bucket (default 1 point per request) with separate buckets for app and user tokens; user-token limits are per client ID per user. Exhausting the bucket returns 429; use Ratelimit-Reset to back off. The documented example shows Ratelimit-Limit 800. [2]

What you end up with

Env varSecretFormatWhat it is
TWITCH_CLIENT_IDnot secretlowercase alphanumeric string, e.g. abc123… [to verify]Twitch application client ID (public; sent as the Client-Id header)
TWITCH_CLIENT_SECRETsecretlowercase alphanumeric string… [to verify]Twitch application client secret, used for app access tokens and the authorization code flow

Pricing

  • Free tier: Registering an application and calling the Twitch API is not described as paid in the docs reviewed. [to verify]

Source [1]

For agents

The same entry as JSON: /api/v1/entries/twitch/developer · requirements /api/v1/requirements/twitch/developer · terms /api/v1/terms/twitch/developer.

Remote MCP (read-only, no auth)
claude mcp add --transport http verapli https://verapli.com/mcp

> "What do I need for Twitch Developer application (Helix API), and how long will it take?"
  → tools/call requirements { "provider_id": "twitch/developer" }

Sources

  1. Twitch Developers - Registering your app Log in to dev.twitch.tv/console with a verified email; enable 2FA; Register Your Application with unique name, OAuth Redirect URLs, Category, CAPTCHA; Client ID is public; New Secret generates a client secret and invalidates the previous one · accessed 25 October 2026 · official
  2. Twitch API guide (rate limits) Token-bucket rate limits per minute, default 1 point per request, separate app and user buckets, Ratelimit-Limit/Remaining/Reset headers, 429 on exhaustion; Authorization Bearer and Client-Id headers in examples · accessed 25 October 2026 · official
  3. Twitch Developer Services Agreement Twitch Data may not be sold, licensed, monetised or shared with third parties without prior written permission; no transfer of end user data to ad networks or data brokers; marketing uses need a separate agreement · accessed 25 October 2026 · official
  4. Twitch Extensions - Monetization Bits revenue in Extensions is shared between broadcaster and developer; requires the separate Extensions Developer Agreement · accessed 25 October 2026 · official

Provider rules change. This page is generated from verapli registry version 2026.1025.387; spotted something out of date? Tell us. Twitch is not affiliated with verapli.