Identity and access
List my connected apps
GET
/api/me/connectionsEvery MCP client connected by OAuth on your behalf, across workspaces.
#Authentication
Session cookie
A signed-in person: the console's session cookie. Every state-changing request also carries the header x-immiscible-csrf: 1, and the member's role decides what it may do. Bearer tokens are ignored on these routes, so no machine credential can reach them.