Manage connected applications
See the Applications that you authorized, and revoke your consent.
See which Applications can act for you, and stop any that you no longer use. This is your own consent, so you manage it yourself and need no Organization or Project role. If you build an Application, this is also where your users go to disconnect it.
See your connected applications
In Spiral Studio, open your avatar menu and select Connected applications. The list shows each Application that you authorized, its scopes, and the Organizations where you gave consent. It also lists tools, such as AI assistants, that registered themselves automatically the first time you connected them.
Revoke consent
Select Revoke access next to an Application, then confirm. This removes your consent for that Application in all Organizations.
After revocation, the Application cannot refresh your session. Access tokens that it already has stay valid until they expire, for up to one hour. Revocation does not delete the Application, and it does not change the access of other users. To connect again, sign in to the Application and approve access again.
If a request fails, select Try again or repeat Revoke access. Do not assume access stopped until a revoke succeeds. If Studio asks you to sign in again, sign out and sign in.
Use the account API
The authorization server provides the same operations over HTTP:
| Operation | Endpoint |
|---|---|
| List your connected applications, 50 at a time | GET https://auth.spiraldb.com/api/account/consents |
| Revoke your consent for one Application | POST https://auth.spiraldb.com/api/account/consents/revoke with {"clientId": "client_01ABC"} |
To revoke your consent in only one Organization, add its ID:
{"clientId": "client_01ABC", "organizationId": "org_01ABC"}. Your consent in
other Organizations stays in place.
These endpoints accept only a token that Spiral's own clients request for
your account, with the audience https://auth.spiraldb.com/api/account.
Spiral Studio requests one when you open Connected applications. An
Application token cannot call them.
Applications, Installed applications, and Connected applications
Applications in the Project sidebar manages the registrations that the Project owns, including redirect URIs. See Register an Application. Organization → Installed applications manages your Organization's installations, including requests and approvals. Connected applications in the account menu manages your personal consent.