v1/mgmt/thirdparty/consents/searchAuthorization
Descope Project ID and Management Key Project ID:Management Key as bearer token.
In: header
Request Body
application/json
length <= 10000Page number starting with 0 for the first page
int32int32Search OAuth user consents for Inbound Apps. Filter by appId, userId, consentId, or tenantId.
For agentic identities (MCP server authorizations), use Search agentic identities instead — it returns agent name, resource ID, and client ID alongside each consent.
curl -X POST "https://api.descope.com/v1/mgmt/thirdparty/consents/search" \ -H "Content-Type: application/json" \ -d '{}'{ "consents": [ { "id": "string", "appId": "string", "userId": "string", "scopes": [ "string" ], "grantedBy": "string", "createdTime": 0, "tenantId": "string", "ExpireTime": 0, "modifiedTime": 0, "authMethod": "string", "blocked": true } ], "total": 0}export interface Response {consents?: {id: stringappId: stringuserId?: stringscopes?: string[]grantedBy?: stringcreatedTime?: numbertenantId?: stringExpireTime?: numbermodifiedTime?: number/** * Empty for an explicit consent, "idJag" for an identity recorded by a Cross-App Access exchange, which cannot be revoked */authMethod?: string/** * True when an admin blocked this "idJag" identity, so the user's ID-JAG exchanges for the application are rejected with invalid_grant */blocked?: boolean}[]total?: number}Rotate third party application secret by application ID POST
Rotate the project third party application secret by the application id, using a valid management key.
Delete third party application consents POST
Delete OAuth user consents for [Inbound Apps](/identity-federation/inbound-apps). Provide `consentIds`, or filter by `appId`, `userIds`, and optional `tenantId`. To revoke [agentic identities](/agentic-identity-hub/core-components/agents), use [Revoke agentic identities](/api/management/agentic-identity-hub/revoke-agentic-identities) instead — it scopes deletion to agentic consents and supports `clientId` and `resourceId` filters.