Connected apps
Authorize third-party apps via OAuth and manage what they can access.
Third-party apps can request access to your account or team using OAuth 2.0. You stay in control — every app shows the scopes it is requesting before you grant access, and you can revoke it at any time.
Authorize an app
- The app sends you to the gateway's consent screen with a list of scopes it wants.
- Pick which team the app should act on (some apps only work against a single team).
- Review the scopes carefully — they describe exactly what the app can do.
- Click Authorize to grant access or Deny to cancel.
Authorized apps are listed under Settings → Authorized apps.
Manage access
From Settings → Authorized apps you can:
- Open settings for the app to see the scopes it has and the team it is bound to.
- Revoke access — the app's tokens stop working immediately and any further requests are rejected.
If an app has its own per-app spending limit, you can also adjust that here. See Spending limits.
Privacy and data
Apps only see what their scopes permit. They never see your password, two-factor secret, or other team's data. The gateway logs every request an app makes against your team so you can audit activity from the Analytics pages.
Building an app instead?
If you are publishing an OAuth app of your own, the developer-facing flow is documented under Authentication → OAuth and Management APIs → Authorized apps.