Connected apps
See and revoke the apps, such as AI assistants and MCP clients, that you allowed to use VitalSentinel for you.
A connected app is an app that you allowed to use VitalSentinel for you, for example an AI assistant that connects through MCP. The account Connected apps page lists these apps and lets you revoke their access.
Before you start
- To open the page, click your avatar at the top right, click User settings, and then click Connected apps in the API group of the sidebar.
- Connected apps are personal. The page shows the apps that you approved, in all your workspaces.
- Requests from a connected app spend the API credits of the workspace. See API credits.
- To connect an AI assistant, see Connect an MCP client.
Approve an app
When an app asks for access, VitalSentinel opens an approval page. The page says that the app "wants to access your VitalSentinel account". The approval page shows:
- This application is requesting: the scopes that the app asks for.
- Choose which workspaces to grant access to: select the workspaces that the app can use.
- App identity published by: if the app publishes its identity at an
httpsaddress, the host of that address and the full address. VitalSentinel reads the app details from this address. - You will be sent to: the address that VitalSentinel sends you to after you approve. Make sure that this is the address you expect.
- A warning if the app is not verified. VitalSentinel has not checked who built it.
Click Approve to give access, or Deny to refuse.
If you approved the same access before, the page says "You have already granted this exact access before. Approving again just reconfirms it."
If the approval page says This request has expired, start the connection again from the app. An approval request is valid for 10 minutes. If the page says Invalid authorization request, the link is missing or not correct. Start the connection again from the app.
Apps with access
The Apps with access card lists each app with access, with the count of apps. If no app has access, the page shows No connected applications.
Each row shows:
- The app name, with the chip Verified or Unverified developer.
- The scopes of the app, as chips.
- The workspace that the app can use, or the number of workspaces. Hover over it to see their names.
- Connected with the date, and Last used with the date and time, or "never".
- A warning chip such as Not used for 45 days or Never used, when the app was not used for 30 days or more.
Unverified developer
The chip Unverified developer means that VitalSentinel has not verified who built the app. Keep the app connected only if you know and trust its developer.
Revoke access
You cannot undo a revoke on this page. To use the app again, the app must ask for access again and you must approve it again.
- On the row of the app, click Revoke access.
- Read what happens: the app can no longer read or change anything for you, and its tokens stop working immediately.
- Click Revoke access.
The message Access revoked confirms it.
Troubleshooting
Why does my AI assistant no longer work?
Somebody revoked its access, or the app is not in the Apps with access list. Connect the app again from the app and approve it. If the workspace has no API credits left, wait for the next cycle. See API credits.
Why does an app show Never used?
You approved the app but it made no requests. If you do not use the app, revoke its access.
Why can the app not see one of my workspaces?
When you approved the app, you did not select that workspace. Revoke the access, then connect the app again and select the workspace.
Related
- API access - API keys for scripts and tools
- Data access log - every request that a connected app made
- MCP security - how MCP access is protected
- Connect an AI assistant - add an app through MCP