Skip to main content
GET
List OAuth authorizations

Authorizations

Authorization
string
header
required

Personal Access Token. Send as Authorization: Bearer hq_pat_....

Response

Third-party apps the caller has authorized

active
boolean
required

Whether the app is still registered and active. A disabled app keeps the consent row until revoked, but its tokens no longer refresh.

authorized_at
string
required

When the app was first authorized.

client_id
string
required
client_type
string
required

public (PKCE) or confidential (has a secret).

name
string
required
scopes
string[]
required

The capability scopes this user has granted the app (the running UNION).

updated_at
string
required

When the grant last grew (a re-auth requesting new scopes).