List OAuth clients (MCP clients) the caller has connected

Session-only - see the sessionAuth scheme description above for why. Backs Settings → Connected apps in the UI. Newest grant first.

get/me/connected-apps

Request

  • Base URL: https://craaft.io/api/v1
  • URL: https://craaft.io/api/v1/me/connected-apps
  • Auth: API key in cookie craaft_session

Response

OK

idstring uuid required

The grant id. Pass this to DELETE /me/connected-apps/{id} to revoke.

clientNamestring required

Name the client supplied at dynamic registration (RFC 7591).

redirectHoststring required

Host (with port, if non-default) of the client's registered redirect URI - shown so the user can recognise which app this is beyond just its self-reported name.

verifiedboolean required

True for a small allowlist of known first-party MCP client hosts (currently claude.ai and claude.com). Any other client can self-register via dynamic client registration, so this is a hint, not a security boundary.

createdAtstring date-time required

When the grant was first approved.

lastUsedAtstring date-time nullable required

Last time this grant's access token was used. Null if never used since approval.

Changes

No recorded changes to this operation across all 2 revisions of this API.