Salesforce OAUTH API

The Oauth API from Salesforce — 4 operation(s) for oauth.

Business capability
Identity & Access Management BC-620.20

Operations 4

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /services/data/v64.0/apps/oauth/usage List external client apps and their usage · Salesforce Oauth Usage #
Ask an LLM
“Which external client apps are connected to my org?”
“Can I page through OAuth app usage for the current org?”
Tell an agent
List external client app usage, page {page}.
Show {page_size} OAuth apps per page starting at page {page}.
DELETE /services/data/v64.0/apps/oauth/usage///tokens Revoke one user's tokens for an app · Salesforce Oauth User Tokens Revoke #
Ask an LLM
“Can I sign a single user out of an external client app by revoking their tokens?”
“What happens to a user's refresh tokens for one app when I revoke them?”
Tell an agent destructive · confirm first
Revoke every token one user holds for this external client app.
Cut off a single user's access to the app by revoking their refresh tokens.
DELETE /services/data/v64.0/apps/oauth/usage//tokens Revoke all tokens for an external client app · Salesforce Oauth Tokens Revoke #
Ask an LLM
“Can I revoke every token issued to an external client app at once?”
“What should I expect after revoking all of an app's tokens?”
Tell an agent destructive · confirm first
Revoke all tokens for this external client app.
Log every user out of the app by revoking all its tokens.
DELETE /services/data/v64.0/apps/oauth/usage/tokens/ Revoke a single OAuth token · Salesforce Oauth Token Revoke #
Ask an LLM
“Can I revoke just one refresh token instead of all of them?”
“Which endpoint revokes one specific OAuth token?”
Tell an agent destructive · confirm first
Revoke this one OAuth refresh token.
Invalidate a single token without touching the app's others.

Documentation

Specifications

Schemas & Data

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/salesforce:salesforce-oauth-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

salesforce-oauth-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Salesforce OAuth API
  description: Find the resources you need to start building.
  contact: {}
  version: '1.0'
servers:
- url: https://login.salesforce.com
  variables: {}
- url: https://id
  variables: {}
- url: https://services
  variables: {}
- url: '{{url}}{{site}}/services/oauth2'
  variables:
    url:
      default: DefaultParameterValue
    site:
      default: DefaultParameterValue
security:
- oauth2:
  - api
tags:
- name: OAuth
paths:
  /services/data/v64.0/apps/oauth/usage:
    parameters: []
    get:
      tags:
      - OAuth
      summary: Salesforce Oauth Usage
      description: Lists all the external client apps for the current org. See OAuth Usage.
      operationId: OAuthUsage
      parameters:
      - name: page
        in: query
        description: Number of the page you want returned. Starts at 0. If you don’t specify a value or if you specify 0, the first page is returned.
        required: true
        style: form
        explode: true
        schema:
          type: integer
          contentEncoding: int32
          examples:
          - 0
        example: 10
      - name: pageSize
        in: query
        description: Number of usage entries per page. Defaults to 100.
        required: true
        style: form
        explode: true
        schema:
          type: integer
          contentEncoding: int32
          examples:
          - 100
        example: 10
      - name: Authorization
        in: header
        description: Replace <token> with your access token
        required: true
        schema:
          type: string
          examples:
          - Bearer <token>
        example: example_value
      responses:
        default:
          description: ''
          headers: {}
          content:
            text/plain:
              schema:
                type: string
                examples:
                - "{\n  \"apps\": [\n    {\n      \"accessTokenFormat\": \"<accessTokenFormat>\",\n      \"availableActions\": \"disable, enable\",\n      \"description\": \"<description>\",\n      \"developerName\": \"<developerName>\",\n      \"identifier\": \"<identifier>\",\n      \"isFromPackage\": bool,\n      \"usageDetailsUrl\": \"/services/data/<version>/apps/oauth/usage/<identifier>/users\"\n    }\n  ],\n  \"currentPageUrl\": \"/services/data/<version>/apps/oauth/usage?page=0&pageSize=100\",\n  \"nextPageUrl\": \"/services/data/<version>/apps/oauth/usage?page=1&pageSize=100\"\n}"
                contentMediaType: text/plain
              example: "{\n  \"apps\": [\n    {\n      \"accessTokenFormat\": \"<accessTokenFormat>\",\n      \"availableActions\": \"disable, enable\",\n      \"description\": \"<description>\",\n      \"developerName\": \"<developerName>\",\n      \"identifier\": \"<identifier>\",\n      \"isFromPackage\": bool,\n      \"usageDetailsUrl\": \"/services/data/<version>/apps/oauth/usage/<identifier>/users\"\n    }\n  ],\n  \"currentPageUrl\": \"/services/data/<version>/apps/oauth/usage?page=0&pageSize=100\",\n  \"nextPageUrl\": \"/services/data/<version>/apps/oauth/usage?page=1&pageSize=100\"\n}"
      deprecated: false
      security: []
      servers:
      - url: https://login.salesforce.com
        variables: {}
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /services/data/v64.0/apps/oauth/usage///tokens:
    parameters: []
    delete:
      tags:
      - OAuth
      summary: Salesforce Oauth User Tokens Revoke
      description: Revokes all tokens for a user of the external client app. See Refresh Token by User and App.
      operationId: OAuthUserTokensRevoke
      parameters:
      - name: Authorization
        in: header
        description: Replace <token> with your access token
        required: true
        schema:
          type: string
          examples:
          - Bearer <token>
        example: example_value
      responses:
        '200':
          description: ''
          headers: {}
      deprecated: false
      security: []
      servers:
      - url: https://login.salesforce.com
        variables: {}
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /services/data/v64.0/apps/oauth/usage//tokens:
    parameters: []
    delete:
      tags:
      - OAuth
      summary: Salesforce Oauth Tokens Revoke
      description: Revokes all tokens available for the external client app. See Refresh Token by App ID.
      operationId: OAuthTokensRevoke
      parameters:
      - name: Authorization
        in: header
        description: Replace <token> with your access token
        required: true
        schema:
          type: string
          examples:
          - Bearer <token>
        example: example_value
      responses:
        '200':
          description: ''
          headers: {}
      deprecated: false
      security: []
      servers:
      - url: https://login.salesforce.com
        variables: {}
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /services/data/v64.0/apps/oauth/usage/tokens/:
    parameters: []
    delete:
      tags:
      - OAuth
      summary: Salesforce Oauth Token Revoke
      description: Revokes one token. See OAuth Refresh Token.
      operationId: OAuthTokenRevoke
      parameters:
      - name: Authorization
        in: header
        description: Replace <token> with your access token
        required: true
        schema:
          type: string
          examples:
          - Bearer <token>
        example: example_value
      responses:
        '200':
          description: ''
          headers: {}
      deprecated: false
      security: []
      servers:
      - url: https://login.salesforce.com
        variables: {}
      x-api-evangelist-processing:
        PascalCaseOperationSummaries: true
        ChooseTags: true
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
components:
  securitySchemes:
    oauth2:
      type: oauth2
      flows:
        implicit:
          authorizationUrl: '{DefaultParameterValue}{DefaultParameterValue}/services/oauth2/authorize'
          scopes:
            api: ''