---
title: "List connected accounts"
method: GET
path: "/api/v1/connected_accounts"
tags: ["Connected Accounts"]
---

# List connected accounts

`GET /api/v1/connected_accounts`

Retrieves a paginated list of connected accounts for third-party integrations. Filter by organization, user, connector type, provider, or identifier. Returns OAuth tokens, API keys, and connection status for each account. Use pagination tokens to navigate through large result sets.

## Query parameters

- `organization_id` string
- `user_id` string
- `connector` string
- `identifier` string
- `provider` string
- `page_size` integer
- `page_token` string
- `query` string
- `connection_names` string[]

## Response `200`

Successfully retrieved the list of connected accounts with their authentication details and status

- ConnectedAccountsListConnectedAccountsResponse
  - `connected_accounts` ConnectedAccountsConnectedAccountForList[] — List of connected accounts matching the filter criteria. Excludes sensitive authorization details for security.
    - `authorization_type` 'OAUTH' | 'API_KEY' | 'BASIC_AUTH' | 'BEARER_TOKEN' | 'CUSTOM' | 'BASIC' | 'OAUTH_M2M' | 'TRELLO_OAUTH1' | 'GOOGLE_DWD' | 'TRUSTED_IDP' | 'SMART_FHIR' | 'NO_AUTH' — - OAUTH: OAuth 2.0 authorization with access and refresh tokens - API_KEY: Static API key authentication - BASIC_AUTH: HTTP Basic Authentication (username/password) - BEARER_TOKEN: Bearer token authentication - CUSTOM: Custom authentication mechanism - BASIC: Basic authentication (alias) - OAUTH_M2M: OAuth 2.0 client credentials (machine-to-machine) - TRELLO_OAUTH1: Trello token-based OAuth1-style browser authorization - GOOGLE_DWD: Google Domain-Wide Delegation - TRUSTED_IDP: Trusted Identity Provider federation (e.g. AWS STS AssumeRoleWithWebIdentity) - SMART_FHIR: SMART on FHIR (SMART App Launch) — OAuth 2.0 authorization for FHIR servers - NO_AUTH: No authentication — connector requires no credentials (e.g. public docs MCP servers)
    - `connection_id` string — Parent connection configuration reference.
    - `connector` string — Connector identifier.
    - `id` string — Unique connected account identifier.
    - `identifier` string — The unique identifier for this account in the third-party service.
    - `last_used_at` string, date-time — Last usage timestamp.
    - `provider` string — OAuth provider name (e.g., 'google', 'microsoft').
    - `status` 'ACTIVE' | 'EXPIRED' | 'PENDING_AUTH' | 'PENDING_VERIFICATION' | 'DISCONNECTED' — - ACTIVE: Account is connected and credentials are valid - EXPIRED: Access token has expired and needs refresh - PENDING_AUTH: Account awaiting user authorization (re-auth initiated) - PENDING_VERIFICATION: OAuth complete; awaiting user identity verification before activation - DISCONNECTED: Account has been manually disconnected
    - `token_expires_at` string, date-time — Token expiration timestamp.
    - `updated_at` string, date-time — Last modification timestamp.
  - `next_page_token` string — Pagination token for retrieving the next page. Empty if this is the last page. Pass this value to page_token in the next request.
  - `prev_page_token` string — Pagination token for retrieving the previous page. Empty if this is the first page. Pass this value to page_token to go back.
  - `total_size` integer — Total count of connected accounts matching the filter criteria across all pages. Use for calculating pagination.

## Other responses

- `400` — Invalid request - occurs when query parameters are malformed or validation fails
- `401` — Authentication required - missing or invalid access token

---

[API](https://skmtc.net/scalekit/apis/scalekit-api-reference.md) · [All operations](https://skmtc.net/scalekit/apis/scalekit-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/scalekit/scalekit-api-reference/versions/a40d5d4650e5/schema)