When you sign in with OAuth, you choose one organization and, optionally, the apps the token can reach. If you select no apps, the token reaches all apps in that organization, including apps you add later. So if you add apps often, you don't need to create a new token each time. The GraphQL API now applies that choice in two more places:
- Incidents and organizations: an OAuth token now only returns those from the organization and apps it was granted for.
- Apps: an organization's list of apps no longer includes deactivated apps.
The AppSignal CLI uses this API, so it only shows what you granted when you signed in. AppSignal MCP follows the same rules.
Read more about authentication for the CLI or AppSignal MCP.
More Tools updates
All Tools updates →- Oct 28, 2026Log severity filters now live in the log query
- Oct 23, 2026Ask your agent to count your logs
- Oct 22, 2026Stop trusting compromised eMudhra certificates
$appsignal install
Make your next crash make sense.
Free for 30 days. No credit card. Two-minute install.