List every Vultr user who authorized your OAuth application, including revoked grants, so you can audit delegated access to the app using the Vultr API.
The authorizations list shows every Vultr customer who has granted your OAuth application access, including users who have since revoked it. This roster lets you audit who is using the application and how many scopes each user consented to.
Follow this guide to list the users who authorized your OAuth application using the Vultr API.
Send a GET request to the List OAuth Client Authorizations endpoint to retrieve the authorizations. Replace {client-id} with your application id.
$ curl "https://api.vultr.com/v2/oauth/clients/{client-id}/authorizations" \
-X GET \
-H "Authorization: Bearer ${VULTR_API_KEY}"
The response contains an authorizations array. Each entry includes the user_id, email, date_authorized, scope_count, and an is_revoked flag. A revoked entry also carries a date_revoked value. The email is read live, so it reflects the user's current Vultr account email.