---
title: "List the organization's connected apps"
method: GET
path: "/oauth-grants"
tags: ["Organization settings"]
---

# List the organization's connected apps

`GET /oauth-grants`

## Request

- Base URL: `https://api.primitive.dev/v1`
- URL: `https://api.primitive.dev/v1/oauth-grants`
- Auth: HTTP bearer

Every app a person connected to this organization through OAuth, with who connected it.

Person only: a dashboard session. The person's role must hold oauth_grants:manage. API keys, agent connection keys and agents are refused.

## Query parameters

- `cursor` string
- `limit` integer

## Response `200`

Success

- object
  - `success` true, required
  - `data` OrgSettingsListOAuthGrantsResult, required
    - `items` object[], required
      - `id` string, required
      - `client` object, required
        - `client_id` string, required
        - `name` string, nullable, required
        - `uri` string, nullable, required
      - `user_id` string, required
      - `created_at` string, date-time, required
      - `last_used_at` string, date-time, nullable, required
      - `reuse_held` boolean, required
    - `next_cursor` string, nullable, required

## Other responses

- `400`: Invalid request parameters
- `401`: Invalid or missing API key
- `403`: Authenticated caller lacks permission for the operation
- `404`: Resource not found
- `429`: Rate limit exceeded. The `ratelimit-*` headers describe the limiter that rejected this request, with its own limit and window, not the API budget that successful responses report. A limiter that reports only a wait sends `Retry-After` alone.

---

[API](https://skmtc.dev/primitive/apis/primitive-api.md) - [All operations](https://skmtc.dev/primitive/apis/primitive-api/llms.txt) - [OpenAPI document](https://skmtc.dev/primitive/apis/primitive-api/revisions/bce409c97acb?raw)