Connected apps (OAuth connections)

Uptimeify lets you connect third-party apps (like Claude Desktop / Claude.ai) via MCP OAuth. These two endpoints let the signed-in user list and revoke their own connections. They power the Settings → Connected apps page in the dashboard.

Both endpoints are session-authenticated (browser cookie), not token-based: they are not part of the wsm_/wsma_ API-token surface, and every operation is strictly scoped to the caller's own connections.

List connections

GET /api/oauth/connections

Returns the caller's own live OAuth connections, one entry per connected client. "Live" means the grant still has an open refresh window. Returns an empty array when the user has no connections.

Example (cURL)

curl -X GET "$BASE_URL/api/oauth/connections" \
  -H "Cookie: $SESSION_COOKIE" \
  -H "Accept: application/json"

Response

[
  {
    "client_id": "claude-desktop",
    "client_name": "Claude",
    "connected_at": "2026-06-01T09:12:00.000Z",
    "last_active": "2026-07-20T14:03:00.000Z",
    "scope": "read-only"
  }
]

Revoke a connection

DELETE /api/oauth/connections/:clientId

Revokes the caller's own grant for the given client: deletes its access/refresh tokens and consent record immediately. The app loses access right away; reconnecting requires the user to go through OAuth consent again.

Example (cURL)

curl -X DELETE "$BASE_URL/api/oauth/connections/claude-desktop" \
  -H "Cookie: $SESSION_COOKIE"

Response

{ "revoked": true, "client_id": "claude-desktop" }

Common errors