Read your own registration with your app key

The self-read: the app’s own registration, answered to the credential the app already holds. Registration metadata only — the values the developer registered, plus the console origin and endpoint paths an SDK needs to run the whole handshake without being separately configured with any of them.

GET /connect/apps/me

Read your own registration with your app key

cURL

curl --request GET \
  --url https://api.paygent.payman.ai/connect/apps/me \
  --header 'x-paygent-connect-app-key: <api-key>'

200

{
  "appId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "name": "<string>",
  "environment": "sandbox",
  "redirectUris": [
    "<string>"
  ],
  "expiresAt": "2023-11-07T05:31:56Z",
  "consoleOrigin": "<string>",
  "authorizeUrl": "<string>",
  "tokenUrl": "<string>",
  "toolDefinitionUrl": "<string>"
}

Authorizations

x-paygent-connect-app-key · string · header · required

A Connect app key (pgc_app_…), identifying the registered third-party app. Always presented together with connectGrant — the pair is one credential, and either half alone is refused. Accepted on the /connect/* surface only.

Response

200

application/json

The registration, as the key's holder may see it

The self-read (GET /connect/apps/me): registration metadata plus the discovery an SDK boots from, and nothing else.

appId · string<uuid> · required

name · string · required

What your customers' consent page shows as "… wants access".

environment · enum<string> · required

Which world a Connect app lives in. sandbox — the Durango demo bank, where nothing is money; a sandbox app may declare only DURANGO agents and its credentials are minted as pgc_app_test_… / pgc_grant_test_…. live — everything else; a live app cannot declare DURANGO agents.

Available options: sandbox, live

redirectUris · string[] · required

The registered list, exactly as authorize and the exchange will byte-compare it. This is the value an SDK should derive its callback handling from, in place of a separately configured copy.

expiresAt · string<date-time> · required

When this registration ages out. An SDK's doctor check warns from this; renewing is a console (session) action.

consoleOrigin · string | null · required

The consumer console's origin — where consent and approvals are collected. The same configuration approval URLs are minted from, and null under the same missing configuration.

authorizeUrl · string | null · required

The consent page on that origin. Null when consoleOrigin is.

tokenUrl · string · required

Path of the token exchange, relative to this server's origin.

toolDefinitionUrl · string · required

Path of the served tool definition, relative to this server's origin.