---
title: "List OAuth apps"
method: GET
path: "/v1/projects/{project_id}/oauth-apps"
tags: ["oauth-apps"]
---

# List OAuth apps

`GET /v1/projects/{project_id}/oauth-apps`

## Request

- Base URL: `https://api.connic.co`
- URL: `https://api.connic.co/v1/projects/{project_id}/oauth-apps`
- Auth: HTTP bearer

Lists an environment's OAuth apps and the redirect URL to register with providers.

Client secrets are never returned.

Required permission: `oauth_apps.view`.

## Path parameters

- `project_id` string, uuid, required

## Query parameters

- `environment_id` string, uuid, required: Environment to list OAuth apps from.

## Response `200`

Successful Response

- OAuthAppListResponse: OAuth apps of an environment and the redirect URL to register with providers.
  - `redirect_url` string, required: Callback URL to register as the redirect URI with the OAuth provider.
  - `apps` OAuthAppResponse[], required: OAuth apps in the environment, sorted by name.
    - `id` string, uuid, required
    - `environment_id` string, uuid, required: Environment the app belongs to.
    - `name` string, required: Name agents reference in `mcp_servers[].oauth.app`. Unique per environment.
    - `authorization_url` string, required: Provider endpoint that end users are sent to for sign-in.
    - `token_url` string, required: Provider endpoint that exchanges authorization codes and refreshes tokens.
    - `client_id` string, required: OAuth client ID registered with the provider.
    - `has_client_secret` boolean, required: Whether a client secret is stored. The secret is never returned.
    - `token_auth_method` 'client_secret_post' | 'client_secret_basic', required: How the client authenticates at the token endpoint: `client_secret_post` sends the credentials in the form body, `client_secret_basic` uses HTTP Basic auth.
    - `scopes` string, nullable, required: Scope value sent with the authorization request, or null to send none.
    - `resource` string, nullable, required: Resource indicator sent with authorization and token requests, or null.
    - `return_urls` string[], required: URLs a connect link may return the browser to. A `return_url` matches an entry with the same scheme and host when its path is the entry's path or below it.
    - `bridge_id` string, uuid, nullable, required: Bridge that token requests go through, or null for a public token endpoint.
    - `connected_users` integer, required: Number of end users with stored tokens.
    - `created_at` string, required
    - `updated_at` string, required

## Other responses

- `401`: Missing or invalid API key.
- `403`: The API key lacks the required permission or access to the environment.
- `422`: Validation Error
- `429`: Rate limit exceeded.

---

[API](https://skmtc.dev/connic/apis/connic-api.md) · [All operations](https://skmtc.dev/connic/apis/connic-api/llms.txt) · [OpenAPI document](https://skmtc.dev/connic/apis/connic-api/revisions/482932da5fbe?raw)