---
title: "The accounts connected, and the providers this deployment can connect"
method: GET
path: "/v1/admin/source-connections/oauth/grants"
tags: ["Source Plane"]
---

# The accounts connected, and the providers this deployment can connect

`GET /v1/admin/source-connections/oauth/grants`

## Request

- Base URL: `https://brain.inite.ai`
- URL: `https://brain.inite.ai/v1/admin/source-connections/oauth/grants`
- Auth: HTTP bearer

Every grant (provider, account label, scopes, status, whether it can refresh itself, when its access token expires) — never a token — plus each provider’s readiness (an app registered or not) and the redirect URI to register. Connected accounts (docs/source-plane.md § Connected accounts): the brain as an outbound OAuth 2.1 client for the cloud connectors (gdrive, onedrive, dropbox). Answers a bare 404 until `SOURCE_PLANE_ENABLED=1` and `SOURCE_OAUTH_CLIENT=1`; needs `SOURCE_CREDENTIAL_ENCRYPTION_KEY` — tokens are never stored in the clear.

Required scope: `brain:admin`.

## Response `200`

The grants.

- SourceOAuthGrantsResponse
  - `grants` object[], required
    - `accessExpiresAt` string, nullable, required
    - `account` string, nullable, required
    - `actor` string, required
    - `apiBase` string, nullable, required
    - `createdAt` string, required
    - `id` string, required
    - `lastError` string, nullable, required
    - `lastRefreshAt` string, nullable, required
    - `ownerUserId` string, nullable, required
    - `provider` string, required
    - `refreshable` boolean, required
    - `resource` string, nullable, required
    - `scopes` string[], required
    - `status` 'active' | 'revoked' | 'broken', required
  - `providers` object[], required
    - `configured` boolean, required
    - `id` 'google' | 'microsoft' | 'dropbox' | 'pipedrive' | 'hubspot' | 'salesforce' | 'bitrix24' | 'kommo' | 'notion' | 'atlassian' | 'slack' | 'github' | 'gitlab', required
    - `redirectUri` string, required
    - `title` string, required
  - `ready` boolean, required

## Other responses

- `401`: Missing or unknown bearer key.
- `403`: The key lacks the required scope.
- `404`: No such resource in this tenant.

---

[API](https://skmtc.dev/inite/apis/inite-brain-platform-api.md) · [All operations](https://skmtc.dev/inite/apis/inite-brain-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/inite/apis/inite-brain-platform-api/revisions/c7c3eb5e304b?raw)