Connected apps

GET

/oauth/grants

curl --request GET \
  --url https://api.nsin.ir/oauth/grants \
  --header 'Authorization: Bearer <token>'

• Production

The third-party applications this user has approved, as shown in the panel under Connected apps. First-party applications are not listed: their access is implicit in having an NSIN account.

Panel session only — an SSO token cannot read or change this list, so that no connected app can see or revoke another.

Authorizations

• panelAuth

Responses

200

Approved applications.

Media type application/json

Array<object>

object

client_id

string

name

string

scope

Space-separated scopes the user approved.

string

created_at

string format: date-time

last_used_at

string format: date-time

nullable

Example ^generated

[
  {
    "client_id": "example",
    "name": "example",
    "scope": "example",
    "created_at": "2026-04-15T12:00:00Z",
    "last_used_at": "2026-04-15T12:00:00Z"
  }
]

401

Missing, malformed, revoked or expired API key — or the owning account is inactive.

Media type application/json

The single error shape used by every endpoint.

object

error

required

Human-readable description of what went wrong.

string

Examples

Example invalidKey

{
  "error": "invalid API key"
}