---
title: "List connected apps"
method: GET
path: "/api/auth/grants"
tags: ["Auth"]
---

# List connected apps

`GET /api/auth/grants`

## Request

- Base URL: `https://makefx.app`
- URL: `https://makefx.app/api/auth/grants`
- Auth: API key in cookie `auth_token`

The OAuth grants the signed-in user has given: the client, the scopes, and when each was created and last used. Browser session only.

## Headers

- `API-Version` '2026-09-10'

## Response `200`

Success

- object
  - `grants` object[], required
    - `id` string, required
    - `clientId` string, required
    - `clientName` string, required
    - `scopes` string[], required
    - `createdAt` number, required
    - `lastUsedAt` number, required
    - `expiresAt` number, required
    - `revokedAt` number, nullable, required

## Other responses

- `401`: No valid credentials. WWW-Authenticate names the protected resource metadata to start from
- `403`: The credentials are valid but not enough: the token lacks the scope, or the action needs a browser session rather than an app token
- `404`: Not found
- `429`: Rate limited. RateLimit names the policy; Retry-After says when to try again
- `500`: Internal server error

---

[API](https://skmtc.dev/makefx/apis/makefx-app-api.md) · [All operations](https://skmtc.dev/makefx/apis/makefx-app-api/llms.txt) · [OpenAPI document](https://skmtc.dev/makefx/apis/makefx-app-api/revisions/a05584da31c6?raw)
