List App Passwords

GET

/api/v1/auth/app-passwords

curl --request GET \
  --url https://example.com/api/v1/auth/app-passwords \
  --header 'Authorization: Bearer <token>'

Return the caller’s App Passwords with their scopes, limits, expiry, and last use. The server never returns password secrets. An account session is required. Route: /api/v1/auth/app-passwords. Inputs: . Safe reads can use bounded retries.

Authorizations

• installationBearer
• browserSession

Responses

200

Media typeapplication/json

Array<object>

object

created_at

required

integer format: int64

expires_at

integer | null format: int64

home_prefix

string | null

id

required

string format: uuid

last_used_at

integer | null format: int64

last_used_ip

string | null

last_used_protocol

One of:

string

string

Allowed values: caldav notes mail webdav api mcp

null

null

name

required

string

plugin_scope

One of:

object

Optional authority for one Plugin, with an optional stable resource ID.

object

access

required

Array<string>

Allowed values: read write

plugin

required

string

resource_id

string | null format: uuid

null

null

scopes

required

Array<object>

object

access

required

string

Allowed values: read write upload_only full

protocol

required

string

Allowed values: caldav notes mail webdav api mcp

Example

[
  {
    "last_used_protocol": "caldav",
    "plugin_scope": {
      "access": [
        "read"
      ]
    },
    "scopes": [
      {
        "access": "read",
        "protocol": "caldav"
      }
    ]
  }
]

401

Media typeapplication/json

object

code

required

string

message

required

string

Example^generated

{
  "code": "example",
  "message": "example"
}

403

Media typeapplication/json

object

code

required

string

message

required

string

Example^generated

{
  "code": "example",
  "message": "example"
}

429

Media typeapplication/json

object

code

required

string

message

required

string

Example^generated

{
  "code": "example",
  "message": "example"
}