--- title: Clearer app authorization screen and a Connected apps list description: When an AI client or app asked for access to your account over OAuth, the approval screen showed only an opaque client id. It now names the application, says… canonical: https://watchfor.io/changelog/2026-09-16-oauth-consent-connected-apps --- [All updates](/changelog/page/3#2026-09-16-oauth-consent-connected-apps) 🔒 Security Sep 16, 2026 · v 7.9.1 # Clearer app authorization screen and a Connected apps list When an AI client or app asked for access to your account over OAuth, the approval screen showed only an opaque client id. It now names the application, says where you will be sent after approving and marks apps WatchFor does not recognise as not verified, so a look-alike request stands out. Under Account settings → Security you can now see every app you have approved, when it last used its access, and revoke it in one click. Automatic client registration is rate-limited and cannot use the WatchFor name. An app WatchFor doesn't recognise is marked as such, with where it sends you after approval. ## What was at risk AI clients connect to WatchFor over OAuth, and most of them register themselves automatically. That's how the MCP standard works, and it means anyone can register an app under any name. The old approval screen showed only a random client id, so a request from a look-alike app looked the same as one from the real thing. ## The approval screen now - It names the application and shows where your browser goes after you approve, for example notes-assistant.example.com . - An app WatchFor doesn't recognise is marked Not verified by WatchFor , so you stop and think before approving it. - It lists in plain words what the app will be able to do, such as reading your monitoring data or creating and changing monitors. ## Example You add WatchFor to a new AI client and get sent to the approval screen. It says the app is called "Notes Assistant", is not verified and will send you back to notes-assistant.example.com . If you didn't start this, or the name and address don't match the tool you're setting up, click Deny and nothing is shared. ## Connected apps Account settings → Security now lists every app you've approved and when it last used its access. Revoke cuts one off, and it has to ask for your approval again. ## Also closed Automatic registration is rate-limited per address, and an app can't register with a name that contains "WatchFor". See [Security](/docs/security) for how we protect your account. Share this update --- Canonical page: https://watchfor.io/changelog/2026-09-16-oauth-consent-connected-apps · Site guide: https://watchfor.io/llms.txt