---
title: "List OAuth grants"
method: GET
path: "/user/oauth/grants"
tags: ["user", "oauth-server"]
---

# List OAuth grants

`GET /user/oauth/grants`

Retrieves a list of all OAuth grants that the authenticated user has authorized. Only available when OAuth server is enabled.

## Response `200`

List of user's OAuth grants

- object[]
  - `client` object — OAuth client details
    - `id` string, uuid — Unique client identifier
    - `name` string — Human-readable name of the client application
    - `uri` string, uri — URL of the client application's homepage
    - `logo_uri` string, uri — URL of the client application's logo
  - `scopes` string[] — List of scopes granted to this client
  - `granted_at` string, date-time — Timestamp when grant was authorized

## Other responses

- `401` — HTTP Unauthorized response.
- `403` — HTTP Forbidden response.

## Changes

- **2025-11-10** `42172c11f78e` — 1 breaking, 1 warning
  - the response's body type/format changed from `object`/`` to `array`/`` for status `200`
  - removed the optional property `grants` from the response with the `200` status
- **2025-11-05** `0d4e9964e6ca` — 1 info
  - endpoint added
- **2023-02-01** `144a34ca6d74` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/user/oauth/grants/get.md)

---

[API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/revisions/2e2a74a7459f/schema)