Browse the API reference

List Connected Apps

get/v1/user/oauth/grants

Part of User.

Every MCP client the user has authorized through OAuth, with the one graph each connection reaches. Active grants only: a revoked grant cannot be reinstated, so it leaves the list.

Authentication

Authenticate in any one of these ways — not all of them:

  • API key in the X-API-Key header.
  • Bearer token in the Authorization header.

Example request

curl
curl -X GET "https://api.robosystems.ai/v1/user/oauth/grants" \
  -H "X-API-Key: $ROBOSYSTEMS_API_KEY"

Responses

200 Successful Response

FieldTypeDescription
grantsrequiredOAuthGrantInfo[]

Active OAuth grants, newest first

OAuthGrantInfo fields
FieldTypeDescription
idrequiredstring

Grant ID

client_namerequiredstring

The connected client's display name

client_urioptionalstring

The client's homepage, if declared

client_is_trustedrequiredboolean

Whether the client is on the trusted list (pre-registered, or a known metadata-document host). Untrusted clients registered themselves.

graph_idrequiredstring

The one graph this consent reaches

graph_nameoptionalstring

The graph's display name, when the graph still exists

resourcerequiredstring

The MCP URL the grant's tokens are bound to (their audience)

scoperequiredstring

Granted scopes, space-separated

created_atrequiredstring

When the user consented

last_used_atoptionalstring

Last token use, if any

StatusMeaning
400Invalid request
401Authentication required
403Access denied
429Rate limit exceeded
500Internal server error