Skip to content

Identity and access

List my connected apps

GET/api/me/connections

Every MCP client connected by OAuth on your behalf, across workspaces.

#Authentication

Session cookie

A signed-in person: the console's session cookie. Every state-changing request also carries the header x-immiscible-csrf: 1, and the member's role decides what it may do. Bearer tokens are ignored on these routes, so no machine credential can reach them.