# Connected apps (https://docs.ctxpipe.ai/docs/mcp/connected-apps)

When an MCP client signs in to ctxpipe with OAuth, you approve it on a consent
page. **Connected apps** lists each app that you approved. Use it to change
what an app can read, with no reconnect.

## Open the page

Open your account settings and choose **Connected apps**. On hosted ctxpipe,
the page is at `https://app.ctxpipe.ai/.auth/account/connected-apps`. A
self-hosted deployment uses the same path on its own origin.

For each app, the page shows the client name, what it can do, and the
organizations that it can read. **Read** is the normal access for an MCP client.
**Changes** shows only when you also ticked **Also allow changes** on the
consent page.

## Choose the organizations

On the consent page, ctxpipe lists your organizations with check boxes. The
organization of your current session is selected. Select at least one.

An app can read only the organizations in its set. When you join a new
organization, ctxpipe does not add it to the apps that you approved before. To change the set:

1. Choose **Edit organizations** for the app.
2. Select or clear organizations.
3. Save.

The change applies on the next tool call. The app does not need to reconnect.

## Revoke an app

Choose **Revoke** for the app. The app loses access at once, and it must ask you
to authorize it again.

An older connection that holds one organization shows **Reconnect to choose
more organizations**. You can only revoke it.

## When a tool says `org_not_found`

The tool call named an organization that the connection cannot read. One of
these is true:

* the organization is not in the set of the app. Add it with **Edit
  organizations**, then call the tool again;
* you are no longer a member of the organization;
* the slug is wrong. Call `list_workspaces` with no `org` to see the
  organizations of the connection.

An organization API key reads only its own organization. Any other `org` gives
the same error.

## API keys

API keys are not apps, so they are not on this page. See
[API keys](/docs/mcp/api-keys).