Agent WranglersSessions and security activity Recommended
List connected apps and personal tokens
Show each person every app, agent and personal token that acts for them, with its scopes and last use. Let them revoke each one.
How to do it
List OAuth grants by app name, scopes, date granted and last use. List personal tokens by name, scopes, last four characters, expiry and last use. Revoking a grant ends its refresh tokens at once. Give new personal tokens an expiry by default, such as 90 days. Store tokens as the API keys rule says.
How to check
Grant a test app access and make a personal token. Both appear in settings. Revoke both, and their next calls answer 401.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/sessions-and-security-activity/connected-apps.