Skip to content

List the OAuth-connected apps that reach this toolbox

GET /toolbox/{id}/connected-app

Lists the OAuth-connected apps (MCP clients) that reach this toolbox, cursor-paginated. Visible to the same people as `GET /toolbox/{id}/share`, because an app reaching a toolbox is as sensitive as who the toolbox is shared with. `via` says how the app reaches it: `toolbox` when this toolbox is named explicitly on the grant, `all_tools` when the grant authorized "All my tools" for a user who can currently use this toolbox (checked live against the grantee's own access, so it cannot go stale). `is_own` flags the caller's own authorization. Requires owner or `edit` access (a grant of the caller's own); `toolbox:manage` alone is not enough.

Path Parameters

idstring
required·

Stored toolbox id (tbx_…).

Response Body

next_cursorstring,null
prev_cursorstring,null
resultobject[]
client_idstring
client_namestring,null

Null when the OAuth client row is gone.

created_atstring · date-time
grant_idstring

OAuth grant id (ogrt_…) — what DELETE /oauth/grant/{id} takes, scoped to the grant's own user.

is_ownboolean

True when this is the caller's own authorization.

last_used_atstring,null · date-time
scopesstring[]

The grant's MCP OAuth scopes (mcp:read, mcp:write, …).

userobject
4 properties
avatar_urlstring,null

The person's picture: their stored profile picture, else a Gravatar URL (d=404, 96px) derived from their email (the address itself is not sent), else null. Draw initials when it is null or the image fails to load.

emailstring · email
idstring

User id (usr_…).

namestring

Omitted along with email when the id no longer resolves to an org member.

viastring

toolbox: this toolbox is named explicitly on the grant. all_tools: an "Everything I can use" authorization by a user who can currently use this toolbox — computed live, not a stored fact.

Possible values:
toolboxall_tools 
curl -X GET 'https://api.elaichi.ai/toolbox/<id>/connected-app' \
  -H 'Authorization: Bearer $ELAICHI_API_TOKEN' \
  -H 'Content-Type: application/json'
const response = await fetch('https://api.elaichi.ai/toolbox/<id>/connected-app', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer ' + process.env.ELAICHI_API_TOKEN,
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);
import os
import requests

url = "https://api.elaichi.ai/toolbox/<id>/connected-app"
headers = {
    "Authorization": f"Bearer {os.environ['ELAICHI_API_TOKEN']}",
    "Content-Type": "application/json",
}

response = requests.get(url, headers=headers)
print(response.json())