Disconnecting an assistant from RelayLink

/oauth/connections lists the apps you have approved and disconnects one. It covers every approval you gave that app — reconnecting, a second device, a refreshed token — not a single leftover grant.

2 min read

RFC 7009 revocation is reachable by the client — Claude, ChatGPT, whoever you approved. That is the wrong party to depend on. If you no longer trust the assistant, or you have lost the laptop it lives on, you still need a way out.

That way is connected applications, signed in with the same emailed code as everything else.

What the page lists

Each row is an application you have a live grant for — typically the host you approved, not the name the app's own document chose for itself. A document controls its client_name. Trusting that would let whoever published it choose what you are asked to trust.

Disconnecting takes effect immediately. The page says so.

One button, every approval

OpenIddict creates a grant per authorization request. Approve Claude twice — a reconnect, a second device, a recovered token — and you hold two valid grants. Listing those as two identical rows, and a button that kills one, is a button that reports success and changes nothing you can see.

So the form is keyed on the application. Disconnect means that app is disconnected. Every live grant you gave it goes.

You cannot use the page to learn which applications exist or who else uses them. An application you have no grant for answers the same as one that does not exist.

Not the same as a key

Named API keys are for clients that cannot sign you in. Revoking a key does not disconnect Claude. Disconnecting Claude does not revoke a key you issued for a script.

If you are containing a leak, do both: disconnect the apps you no longer trust, and revoke the keys that might have been copied.

After you disconnect

The next call from that app fails authentication. It does not get a softer error that explains your choice. Reconnecting is a new approval, a new grant, the same consent screen.

The consent screen links here on purpose, so the control is visible at the moment you grant access — not only later, when you already want it gone.

Sign in at your account and open connected applications. If you connected with a key instead of a sign-in, the keys page is the one that matters.

Frequently asked questions

If I disconnect Claude, does a second device stay connected?
No. Disconnect is keyed on the application, not on one approval. Every live grant you gave that app dies — reconnecting, another device, a refreshed token family.
Does disconnecting an app revoke my API keys?
No. Keys are a different door. Disconnect ends OAuth grants. Revoke a key on /account/keys if that is what the client was using.
Can I disconnect from inside Claude?
The client can revoke a token. You should not have to depend on that. The connections page is the control you can reach after you no longer trust the assistant, or after you have lost the machine it runs on.