Connected clients

Connected clients lists active grants to your organisation’s hosted edge. Each grant records one consent to a client. You can see and revoke your own grants in the selected organisation. An organisation owner can see and revoke every member’s grants there. Switch organisation to manage its grants.

The page shows the client’s identifier, the edge resource, scope and the consent, last issue and expiry times. Owners also see the member’s email. A client identifier records which client received access; it does not verify a company’s identity or a client name.

Choose Revoke grant to stop that grant renewing access. Existing access tokens expire within an hour. The grant disappears from the active list when revocation succeeds. A refused revocation displays the reason and leaves the grant unchanged. Reconnecting requires fresh consent. Each revocation is recorded in the organisation’s audit trail.

If a client presents an already exchanged authorisation code again, the hub ends that grant’s renewal. Reconnect with fresh consent. Access tokens already issued still expire within an hour.

A client can disconnect by posting its refresh token to the hub’s OAuth revocation endpoint, advertised in its authorisation-server metadata. This ends the grant even if that refresh token has already been rotated. The hub does not revoke access tokens an edge already holds; they expire within an hour.

Removing a member ends their grants in the organisation. Closing the organisation ends all its grants. Removing or replacing its URL on Hosted edge also ends all grants and outstanding authorisation codes. Adding the same URL again restores none of them. Saving the unchanged URL keeps existing grants.