Connected apps
OAuth sign-in for the Ivora MCP server: the consent API the dashboard's consent page calls (/v1/oauth/requests/{request_id}), and the apps connected to you (/v1/me/connected-apps) or to a project (/v1/tenants/{tenant_id}/connected-apps), with their last use, revocation and audit. Signed-in users only; API keys and OAuth tokens are refused. The OAuth endpoints themselves (/oauth/authorize, /oauth/token, /oauth/register, /oauth/revoke and the /.well-known metadata) follow the OAuth specifications rather than this envelope; see the MCP OAuth guide.
8 endpoints
- getRead an authorization request for the consent page/v1/oauth/requests/{request_id}The app asking for access, the scopes it requested, the projects you can grant (with the project scopes you hold) and whether write scopes need a step-up sign-in.
- postApprove an authorization request/v1/oauth/requests/{request_id}/approveGrants the app the chosen scopes on one project and returns redirect to, the app's redirect URI with a single-use code, for the browser to open.
- postDecline an authorization request/v1/oauth/requests/{request_id}/denyReturns redirect to, the app's redirect URI with error access denied.
- getList the apps connected to your account/v1/me/connected-appsYour active grants, newest first: the app, the project, the scopes, when you granted it, when it expires and its last use (updated at most once a minute).
- deleteDisconnect one of your apps/v1/me/connected-apps/{grant_id}Revokes the grant: its access and refresh tokens stop working at once.
- getList the apps connected to a project/v1/tenants/{tenant_id}/connected-appsEvery member's active grants on the project, with who granted them and their last use.
- deleteDisconnect an app from a project/v1/tenants/{tenant_id}/connected-apps/{grant_id}Revokes any member's grant on the project: its tokens stop working at once.
- getRead the project's connected-app audit log/v1/tenants/{tenant_id}/connected-apps/auditNewest first: consent granted, token issued, token refreshed, token revoked, grant revoked, refresh reuse detected and code reuse detected, with the app, the grant and the actor.