Skip to content

List active connections

GET
/connections
curl --request GET \
--url https://api.engram.page/connections \
--header 'Authorization: Bearer <token>'

OAuth client families, device families, and PATs. Session-auth only.

Connections

Media typeapplication/json
ConnectionsList
Array<object>
Connection
object
cimd_url

CIMD metadata-document URL. Present only for clients that published one, in which case it is the client’s public identifier and the reason it can be verified despite redirecting to loopback.

string
nullable
client_id
string
nullable
connected_at
string format: date-time
nullable
family_id

The grant lineage this row is. One OAuth client can hold several grants over different vault sets, each its own row; pass this to DELETE /connections/oauth/{client_id} to revoke only this one. Null for PATs.

string format: uuid
nullable
first_ip
string
nullable
first_user_agent
string
nullable
key_id
string
nullable
kind
required
string
label

The user’s own name for this connection, when they set one.

string
nullable
last_used_at
string format: date-time
nullable
logo
string
nullable
name
string
nullable
redirect_uri

The redirect this grant’s authorization code was delivered to. This, not redirect_uris, is what decides verified. Null for non-OAuth connections and for grants issued before it was recorded.

string
nullable
redirect_uris

Every redirect the client registered. Informational only — a client may register several and choose one per authorization, so a vendor host appearing here proves nothing about this grant.

Array<string>
nullable
scope
string
nullable
slug
string
nullable
software_id
string
nullable
software_version
string
nullable
vault_ids

Vaults this connection may reach. Null means all vaults.

Array<string>
nullable
vault_names

Positional against vault_ids. An entry is null when the vault is gone or outside the caller’s own scope.

Array<string>
nullable
verified
boolean
nullable
Example
[
{
"cimd_url": "https://claude.ai/.well-known/oauth-client",
"kind": "oauth"
}
]