Hypery

Connected apps

Authorize third-party apps via OAuth and manage what they can access.

Third-party apps can request access to your account or team using OAuth 2.0. You stay in control — every app shows the scopes it is requesting before you grant access, and you can revoke it at any time.

Authorize an app

  1. The app sends you to the gateway's consent screen with a list of scopes it wants.
  2. Pick which team the app should act on (some apps only work against a single team).
  3. Review the scopes carefully — they describe exactly what the app can do.
  4. Click Authorize to grant access or Deny to cancel.

Authorized apps are listed under Settings → Authorized apps.

Invitations from apps

An app you're invited to (say, to edit someone's file) can email you through Hypery. The email comes from "App via Hypery", in the app's brand, and says who invited you.

  1. Clicking its button opens the app, which sends you to Hypery's sign-in page. Nothing is signed in by the click.
  2. Choose how to sign in:
    • Continue as your address signs in with the address the invitation went to. No sign-in email is needed, because opening the invitation proved it's yours. New to Hypery? This creates your account.
    • Any other method (Google, GitHub, Apple, a password, a passkey, or another email address) accepts the invitation with that account instead.
  3. The first time you use the app, it asks for your consent as usual.

Continue as shows only in the browser where you opened the invitation, for an hour, and works once. If you have two-factor authentication, you're still asked for your code. Didn't expect an invitation? Ignore the email: nothing happens unless you sign in.

Manage access

From Settings → Authorized apps you can:

  • Open settings for the app to see the scopes it has and the team it is bound to.
  • Revoke access — the app's tokens stop working immediately and any further requests are rejected.

If an app has its own per-app spending limit, you can also adjust that here. See Spending limits.

Privacy and data

Apps only see what their scopes permit. They never see your password, two-factor secret, or other team's data. The gateway logs every request an app makes against your team so you can audit activity from the Analytics pages.

Building an app instead?

If you are publishing an OAuth app of your own, the developer-facing flow is documented under Authentication → OAuth, Invitations and Management APIs → Authorized apps.