Get an application's access in an organization

GET /v1/organizations/{org_id}/applications/{application_id} · permission organizations:write

Returns whether the application is enabled in the organization (§17.6). A row that was never written is returned as disabled with version 0, null timestamps and ETag: "0". When the application's org_access_mode is enabled_organizations or assigned_only, organization sign-in to it passes only while this row is enabled. The response carries an ETag to use with If-Match.

Request

Field	Type	Required	Description
`org_id`	path	yes	Organization ID (`org_…`).
`application_id`	path	yes	Application ID (`app_…`).

No request body.

Response

200 OK with the access row.

{
  "organization_id": "org_01j9xk3m7q8r2s4t6v8w0y2z4a",
  "application_id": "app_01j9xm4n8r9s3t5v7w9x1y3z5b",
  "status": "enabled",
  "enabled_at": "2026-10-12T09:30:00.123456Z",
  "updated_at": "2026-10-12T09:30:00.123456Z",
  "version": 1
}

Errors

HTTP	code	When
404	`not_found`	The organization or application does not exist in this environment.
401	`unauthenticated`	The credential is missing, invalid or revoked.
403	`insufficient_permissions`	The credential lacks the required permission.
429	`rate_limited`	The rate limit was exceeded; retry after the `Retry-After` period.
503	`service_unavailable`	A dependency is temporarily unavailable; retry after the `Retry-After` period.

Example

curl -i "https://api.eu.keenauth.com/v1/organizations/org_01j9xk3m7q8r2s4t6v8w0y2z4a/applications/app_01j9xm4n8r9s3t5v7w9x1y3z5b" \
  -H "Authorization: Bearer $KEENAUTH_SECRET_KEY"