List your connected OAuth applications
Required scopes: token.get.
Requires an existing finite bt_ personal credential. Delegated OAuth tokens cannot administer grants. Owner-only, current personal authority; no token/hash exposure. Returns at most twenty current grants. Revocation immediately denies access and refresh. Other users receive 404. Browser equivalent is /settings/connected-apps. Requires token.get in current user authority and explicit bt_ scopes when scoped.
Authentication
Personal bearer credential issued through existing account settings or browser-approved CLI flow. Must be active, finite, unexpired, unrevoked, within any rotation overlap, and bound to an active personal membership/user/account. Explicit scopes intersect current user permissions; empty existing personal scopes inherit current user authority. Not an OAuth grant or service token. Browser cookies are ignored.