List OAuth authorizations
Lists the third-party OAuth applications the authenticated caller has authorized (consented to). Each entry includes the client_id, app name, client_type, an active flag indicating whether the app is still registered and enabled, the union of scopes the user has granted it, and timestamps for when it was first authorized and last updated. First-party apps such as the browser extension never appear here since they skip consent.
Authorizations
Personal Access Token. Send as Authorization: Bearer hq_pat_....
Response
Third-party apps the caller has authorized
Whether the app is still registered and active. A disabled app keeps the consent row until revoked, but its tokens no longer refresh.
When the app was first authorized.
public (PKCE) or confidential (has a secret).
The capability scopes this user has granted the app (the running UNION).
When the grant last grew (a re-auth requesting new scopes).