Withdraw what a user allowed an app
The app's grants and tokens for them end, its refresh tokens included, and each session it was signed in to that registered a `backchannel_logout_uri` gets a logout token; their next sign-in to it asks them again. Needs `org.users.edit`. Recorded as `user.consent_revoked`.
/v1/orgs/{org}/brands/{brand}/users/{user}/consents/{consent}The app's grants and tokens for them end, its refresh tokens included, and each session it was signed in to that registered a backchannel_logout_uri gets a logout token; their next sign-in to it asks them again. Needs org.users.edit. Recorded as user.consent_revoked.
Authorization
bearer An org API key (sk_live_…, sk_test_…), or an access token from the Synq issuer (the synq brand, on the accounts host) for this API.
In: header
Path Parameters
length <= 100Response Body
application/problem+json
application/problem+json
application/problem+json
application/problem+json
curl -X DELETE "https://example.com/v1/orgs/string/brands/string/users/string/consents/string"Ask for a change that the person approves in the dashboard POST
An app's redirect URIs, asked for from an MCP host (AERO-1034): nothing changes until the same person approves it in the dashboard within 15 minutes. People only, never an API key. Needs `org.apps.edit`. Recorded as `change_request.created`.
What a user allowed apps GET
What they allowed each app that isn't the brand's own, oldest first: signing in to it again doesn't ask them again for that. Needs `org.users.view`.