but this doesn't specify which endpoint I could call in the case of an SSH application.
Ideally, I'd like to supply the clientId and clientSecret to
cloudflared access ssh-gen
cloudflared access ssh-gen
directly, but there does not seem such flags, and by looking at the code an application token is required. There's also a related issue on this topic on github: https://github.com/cloudflare/cloudflared/issues/1056