Connected apps
List and revoke the apps connected to Nuvelics with OAuth, your own or your whole organization's.
x-api-key<token>A service key (nvs_...) in the x-api-key header. A service key belongs to one organization: an X-Org-Id header is optional and, when sent, must name that organization. This header also accepts any credential the bearer scheme does, and when a request sends both headers, this one is used.
Every OAuth connection (consent grant) recorded for the organization
application/json- response
items*array<>included*array<>curl -X GET 'https://api.nuvelics.com/api/tenant/v1/oauth-connections'{ "items": [ { "id": "string", "userId": "string", "clientId": "string", "clientName": "string", "selfRegistered": true, "createdAt": "2019-08-24T14:15:22Z", "lastRefreshedAt": "2019-08-24T14:15:22Z", "redirectUris": [ "string" ], "metadata": { "clientUri": "string", "logoUri": "string", "tosUri": "string", "policyUri": "string" }, "resources": [ "mcp" ], "isMine": true } ], "included": [ { "type": "string", "id": "string", "name": "string" } ]}x-api-key<token>A service key (nvs_...) in the x-api-key header. A service key belongs to one organization: an X-Org-Id header is optional and, when sent, must name that organization. This header also accepts any credential the bearer scheme does, and when a request sends both headers, this one is used.
Every OAuth connection the calling user has authorized in this organization, and no other member's -- so this can never be used to learn which colleagues have connected which applications. Every row's isMine is true
application/json- response
items*array<>curl -X GET 'https://api.nuvelics.com/api/tenant/v1/oauth-connections/mine'{ "items": [ { "id": "string", "userId": "string", "clientId": "string", "clientName": "string", "selfRegistered": true, "createdAt": "2019-08-24T14:15:22Z", "lastRefreshedAt": "2019-08-24T14:15:22Z", "redirectUris": [ "string" ], "metadata": { "clientUri": "string", "logoUri": "string", "tosUri": "string", "policyUri": "string" }, "resources": [ "mcp" ], "isMine": true } ]}x-api-key<token>A service key (nvs_...) in the x-api-key header. A service key belongs to one organization: an X-Org-Id header is optional and, when sent, must name that organization. This header also accepts any credential the bearer scheme does, and when a request sends both headers, this one is used.
id*stringUUID v7, base32-encoded (26 Crockford chars)
^[0-7][0-9A-HJKMNP-TV-Z]{25}$Connection revoked for the whole organization: the named application loses access for every member who connected it. Every consent grant it holds here is deleted, and its refresh-token families (with their descendant access tokens) for this org are revoked immediately. The path id names one grant, but the effect is deliberately not scoped to that grant's user -- this is the organization-wide action. To disconnect only the calling user's own connection, leaving other members' grants and tokens live, use DELETE /oauth-connections/mine/{id}
curl -X DELETE 'https://api.nuvelics.com/api/tenant/v1/oauth-connections/string'x-api-key<token>A service key (nvs_...) in the x-api-key header. A service key belongs to one organization: an X-Org-Id header is optional and, when sent, must name that organization. This header also accepts any credential the bearer scheme does, and when a request sends both headers, this one is used.
id*stringUUID v7, base32-encoded (26 Crockford chars)
^[0-7][0-9A-HJKMNP-TV-Z]{25}$The calling user's own connection revoked: their consent grant for that application is deleted, and only the refresh-token families minted for them (with their descendant access tokens) are revoked. Other members' grants and tokens for the same application in the same organization stay live -- which matters for an application whose client_id every member shares, where the organization-wide DELETE /oauth-connections/{id} would disconnect everyone
curl -X DELETE 'https://api.nuvelics.com/api/tenant/v1/oauth-connections/mine/string'