Connected apps

Every assistant that signed in to Standards over OAuth is listed in Connected apps, a section of your settings. It shows your own connections across every workspace you belong to, one line each: the app's name, the workspace, when it was last active, and its access level. Connections made with an API key are not listed here; they live under API keys.

An app whose client ID is a web address, a Client ID Metadata Document, shows that verified domain with a shield; any other app shows unverified domain. Only the Standards browser extension is marked official. The extension has its own group, with each connected browser on its own line.

The section appears where your Standards host serves connected apps. Where it does not, the section is absent and the browsers the extension connected stay listed, and disconnectable, under Devices.

Change an access levelCopy Anchor Link

Pick another level on the app's line: Read, Write or Full, defined on OAuth. The change is immediate, silent and needs no reconnection: the connection's next request carries the new level, and a confirmation names the app and the level. If the change fails, the previous level comes back with an error message.

A level you cannot pick says why:

• not in your role: your role in that workspace lacks the capability the level is defined by (read, write or delete).
• not requested by the app: the app never asked for all of that level's scopes, so it cannot be raised to it. Reconnect from the app, which then asks again.

Inside a level, a right your role lacks, such as seeing members, is struck through in the app's detail: it is granted to the connection but yields nothing, because the effective right is the level intersected with your role.

A connection authorized before levels existed may hold a set of scopes that matches no level, for example reading and writing plus seeing members. Its level reads Custom, and its detail shows the rights it actually holds. Pick a level to replace that set; Custom cannot be picked back.

Only you change your own connections, from your own settings, signed in as yourself. An app, an API key or an OAuth token cannot change a level.

Revoke a connectionCopy Anchor Link

Revoke asks for a second click to confirm. It ends the connection at once: the next request and the next refresh are refused, and the browsers it carried are disconnected. The app signs in again if you reconnect it. Revoked connections stay in the authorization history but disappear from this list.

For the extension, Disconnect on a browser's line ends that browser alone. Its open channel is not cut on the spot: the channel is refused, and closed, the next time it revalidates its authorization.

Next stepsCopy Anchor Link

• OAuth: scopes, levels, token lifetimes and client rules.
• Tools: which tools each level serves.
• Book a demo