# Get an application's access in an organization

`GET /v1/organizations/{org_id}/applications/{application_id}` · permission `organizations:write`

Returns whether the application is enabled in the organization (§17.6). A row that was never written is returned as `disabled` with `version` 0, null timestamps and `ETag: "0"`. When the application's `org_access_mode` is `enabled_organizations` or `assigned_only`, organization sign-in to it passes only while this row is `enabled`. The response carries an `ETag` to use with `If-Match`.

## Request

| Field | Type | Required | Description |
|---|---|---|---|
| `org_id` | path | yes | Organization ID (`org_…`). |
| `application_id` | path | yes | Application ID (`app_…`). |

No request body.

## Response

`200 OK` with the access row.

```json
{
  "organization_id": "org_01j9xk3m7q8r2s4t6v8w0y2z4a",
  "application_id": "app_01j9xm4n8r9s3t5v7w9x1y3z5b",
  "status": "enabled",
  "enabled_at": "2026-10-12T09:30:00.123456Z",
  "updated_at": "2026-10-12T09:30:00.123456Z",
  "version": 1
}
```

## Errors

| HTTP | code | When |
|---|---|---|
| 404 | `not_found` | The organization or application does not exist in this environment. |
| 401 | `unauthenticated` | The credential is missing, invalid or revoked. |
| 403 | `insufficient_permissions` | The credential lacks the required permission. |
| 429 | `rate_limited` | The rate limit was exceeded; retry after the `Retry-After` period. |
| 503 | `service_unavailable` | A dependency is temporarily unavailable; retry after the `Retry-After` period. |

## Example

```bash
curl -i "https://api.eu.keenauth.com/v1/organizations/org_01j9xk3m7q8r2s4t6v8w0y2z4a/applications/app_01j9xm4n8r9s3t5v7w9x1y3z5b" \
  -H "Authorization: Bearer $KEENAUTH_SECRET_KEY"
```