See and revoke installed OAuth apps
Organization administrators can now review the third-party OAuth apps that have access to their organization. Open Settings > OAuth applications, then the Installed tab. You'll see each app, how many people authorized it, and when it was last authorized.
Open an app to see the permissions it currently has on your organization, databases, and branches, along with who authorized it. Revoke access removes that app's access to this organization only. It does not change its access to other organizations, and someone can grant it again through the app's normal authorization flow.
Dynamically registered apps, like MCP clients, are hidden by default so they don't crowd the list. Uncheck Hide DCR apps to see them.