# Connected apps

A connected app is an app that you allowed to use VitalSentinel for you, for example an AI assistant that connects through MCP. The account **Connected apps** page lists these apps and lets you revoke their access.

## Before you start [#before-you-start]

- To open the page, click your avatar at the top right, click **User settings**, and then click **Connected apps** in the **API** group of the sidebar.
- Connected apps are personal. The page shows the apps that you approved, in all your workspaces.
- Requests from a connected app spend the API credits of the workspace. See [API credits](/workspace/api-credits).
- To connect an AI assistant, see [Connect an MCP client](/mcp/connecting).

## Approve an app [#approve-an-app]

When an app asks for access, VitalSentinel opens an approval page. The page says that the app "wants to access your VitalSentinel account". The approval page shows:

- **This application is requesting**: the scopes that the app asks for.
- **Choose which workspaces to grant access to**: select the workspaces that the app can use.
- **App identity published by**: if the app publishes its identity at an `https` address, the host of that address and the full address. VitalSentinel reads the app details from this address.
- **You will be sent to**: the address that VitalSentinel sends you to after you approve. Make sure that this is the address you expect.
- A warning if the app is **not verified**. VitalSentinel has not checked who built it.

Click **Approve** to give access, or **Deny** to refuse.

If you approved the same access before, the page says "You have already granted this exact access before. Approving again just reconfirms it."

If the approval page says **This request has expired**, start the connection again from the app. An approval request is valid for 10 minutes. If the page says **Invalid authorization request**, the link is missing or not correct. Start the connection again from the app.

## Apps with access [#apps-with-access]

The **Apps with access** card lists each app with access, with the count of apps. If no app has access, the page shows **No connected applications**.

Each row shows:

- The app name, with the chip **Verified** or **Unverified developer**.
- The scopes of the app, as chips.
- The workspace that the app can use, or the number of workspaces. Hover over it to see their names.
- **Connected** with the date, and **Last used** with the date and time, or "never".
- A warning chip such as **Not used for 45 days** or **Never used**, when the app was not used for 30 days or more.

### Unverified developer [#unverified-developer]

The chip **Unverified developer** means that VitalSentinel has not verified who built the app. Keep the app connected only if you know and trust its developer.

## Revoke access [#revoke-access]

<Callout type="warn">
  You cannot undo a revoke on this page. To use the app again, the app must ask for access again and you must approve it again.
</Callout>

1. On the row of the app, click **Revoke access**.
2. Read what happens: the app can no longer read or change anything for you, and its tokens stop working immediately.
3. Click **Revoke access**.

The message **Access revoked** confirms it.

## Troubleshooting [#troubleshooting]

### Why does my AI assistant no longer work? [#why-does-my-ai-assistant-no-longer-work]

Somebody revoked its access, or the app is not in the **Apps with access** list. Connect the app again from the app and approve it. If the workspace has no API credits left, wait for the next cycle. See [API credits](/workspace/api-credits).

### Why does an app show Never used? [#why-does-an-app-show-never-used]

You approved the app but it made no requests. If you do not use the app, revoke its access.

### Why can the app not see one of my workspaces? [#why-can-the-app-not-see-one-of-my-workspaces]

When you approved the app, you did not select that workspace. Revoke the access, then connect the app again and select the workspace.

## Related [#related]

- [API access](/account/api-access) - API keys for scripts and tools
- [Data access log](/workspace/data-access-log) - every request that a connected app made
- [MCP security](/mcp/security) - how MCP access is protected
- [Connect an AI assistant](/mcp/connecting) - add an app through MCP