What the app may do, and the grant's history

GET 
/app_installs/:id/permissions

The granted scopes in catalog order with the developer's reason, the events its subscription receives, the grant's history newest first (consent, re-consents, a release that moved it on by itself and the scopes that version dropped, revocations — saying when only an earlier grant went — token reuse, pauses, the legacy tokens it replaced — at most 20), and the re-consent waiting for an admin, or null. integrations.read. Throttle: app_installs/read/minute, 300 a minute.

A signed-in session or the person's own personal access token; an app's OAuth token is refused (403 resource_not_grantable).

Request

Responses

200

The permissions.

401

No session or token, or one that is no longer valid. A request that presented a token gets WWW-Authenticate: Bearer realm="KudosCRM", error="invalid_token" (refresh it); one with no credentials and no session cookie gets the bare challenge.

Response Headers

WWW-Authenticate
Example: Bearer realm="KudosCRM", error="invalid_token"

403

Not allowed: the permission this route needs is missing, the Integrations module is off (code: module_disabled, meta.module_key, meta.blocked_at_layer), or the caller is an app's own OAuth token (code: resource_not_grantable).

404

Not found in this workspace — or not something the caller may know exists.