English (United States) Deutsch Español (Latinoamérica) Français 日本語 简体中文
search shadow

Menu

Articles in this section

Revizto developer portal Follow

Avatar
Mallory McClure
  • Updated

The developer portal allows account owners and admins to manage Revizto API integrations. You can add and manage OAuth apps for Revizto API integrations, activate Revizto-managed preconfigured apps such as Revizto MCP Server, control which integrations are available to organization account members, and manage API notification emails.

The developer portal uses OAuth 2.0, which lets users authorize a third-party integration through a standard Revizto sign-in and approval flow.

Existing integrations based on access codes are still currently supported, for backward compatibility. New integrations should use the developer portal and OAuth app registration.

See also:

Required permissions

Users with the account owners or account admin account role are able to view and manage apps from the developer portal. You can view your account role from the Account info/Manage account info page in Revizto Workspace. See Account and license roles for more information. 

Standard users can view apps that are active in the account from App integrations, however they cannot add apps, edit apps, see client secrets, or manage settings.

A user's Revizto access rights apply to the integration meaning it can only access data that the authorized Revizto user is allowed to access.

Accessing the developer portal

Account owners and admins can manage OAuth apps from Developer portal in Revizto Workspace. From here, you can add and manage custom apps, enable or disable preconfigured apps, manage API notification emails, and view available integrations.

To access the developer portal:

  1. Sign in to ws.revizto.com.
    • If you are a member of several accounts, ensure that the correct account is selected.

  2. Open the Tools dropdown menu, then select Manage account info. If you do not see Manage account info, see Required permissions. 

  1. Click Developer Portal.

App integrations for standard users

Standard users do not have access to the developer portal, but they can view their account's apps from App integrations in Revizto Workspace. 

App integrations provides an overview of what's available, including:

  • Active custom apps.
  • Active preconfigured apps.
  • App descriptions.

While standard users can view general app information from App integrations, information is restricted to only the basic information on what is available in the account. It does not show additional details or administrative functions, including:

  • Inactive apps (custom or preconfigured).
  • Apps' client IDs.
  • Apps' client secrets.
  • Apps' redirect URIs.
  • App management actions.

If you are expecting an app to be available and do not see it in App integrations, contact the account owner or admin.

To access App integrations:

  1. Sign in to ws.revizto.com.
    • If you are a member of several accounts, ensure that the correct account is selected.

  2. Open the Tools dropdown menu, then select Account info.

  1. Click App integrations.

App types

In the developer portal, there are two types of apps: preconfigured apps and custom apps. 

Preconfigured apps

Preconfigured apps are managed by Revizto or Revizto partners and do not need to be added by an account owner or admin. Account owners and admins cannot see or edit the client ID, client secret, or redirect URIs for a preconfigured app; they can only activate or deactivate the app. Preconfigured apps are deactivated by default and must be activated before account members can use them. 

Preconfigured apps include the Revizto MCP Server, which allows users to connect their Revizto accounts to an AI tool of their choice. To establish a connection with an AI assistant, account owners or admins have to first activate the Revizto MCP Server app in Developer Portal. For more information on setting up the Revizto MCP server, see Connecting AI tools to Revizto MCP Server.

Custom apps

Custom apps, meanwhile, are apps added to the account by an account owner or admin. The custom app is set up in the developer portal and the account owner or admins has to manage the components required to establish the connection between Revizto and the third-party integration. 

Setting up custom apps includes the following components: redirect URIs, a client ID, a client secret, and API notification emails.

Redirect URIs

A redirect URI is the callback address where Revizto sends the user after OAuth authorization is approved or canceled. The address is provided by the third-party integration and may be called a callback URL in the integration's documentation.

Each redirect URI used by the third-party integration must be registered in the developer portal. When setting up a custom app, Revizto validates redirect URIs according to the following parameters:

  • There is at least one redirect URI. Multiple redirect URIs are also supported. 
  • The protocol, domain, and path match exactly. 
  • The character case matches. 
  • Production redirect URIs use HTTPS (except for localhost).
  • The port matches for non-localhost URIs (port is not validated for localhost).
  • Any trailing slash matches exactly as part of the URI.
  • The URI contains no wildcards.
  • During OAuth authorization, the redirect URI used by the third-party integration exactly matches one of the redirect URIs registered for the app in Developer portal.
  • There are no duplicate redirect URIs in the same custom app. 

For example:

  • https://app.example.com/oauth/revizto/callback
  • https://integrations.company.com/revizto/oauth/callback
  • http://localhost:3000/oauth/revizto/callback

If authorization fails because of a redirect URI mismatch, check the third-party integration's configuration and the redirect URIs saved in the app in Developer portal.

Client ID and client secret

When a custom app is added, Revizto creates the client ID and client secret credentials, which act as the identity credentials for the third-party integration.

  • Client ID: Visible and copyable in Developer portal. The third-party integration uses it to identify the OAuth app. 
  • Client secret: Shown immediately after an app is added, or after the regeneration of the client secret. After the credentials dialog is closed, the client secret cannot be viewed or copied again. 

After receiving the client secret, make sure to immediately store it securely in the third-party integration or in your company secrets manager.

If the client secret is lost, it can be regenerated following the steps in Regenerating client secrets. After regeneration, the previous client secret will stop working immediately and you will need to update the third-party integration with the new client secret.

API notification emails

The API notification emails in custom apps are the technical contacts for the app and your account. These emails can be managed when adding or editing a custom app. 

Revizto sends important API-related updates to these emails such as:

  • API changes.
  • Deprecation notices.
  • Breaking-change notices.
  • Developer Portal and OAuth integration updates.

Whenever possible, use a shared mailbox so your organization can keep receiving API updates regardless of personnel changes. 

Activating and deactivating apps

Account owners and admins can activate and deactivate both preconfigured and custom apps. App status is applied across the account. Standard users will only see active apps in App integrations.

When an app is deactivated, account members will not be able to use the third-party integration to access Revizto and all existing access and new OAuth authorization attempts will be blocked. When an app is reactivated, users may need to reauthorize it by signing in again using their Revizto user account.

To activate or deactivate an app:

  1. Navigate to Developer portal in Revizto Workspace.
  2. Find the app you want to activate or deactivate.

  3. In the app's Active column, turn the toggle on or off (blue is active).

  1. In the confirmation dialog, click Activate or Deactivate to confirm you want to proceed. 

    You can also activate or deactivate a custom app using the toggle at the top of the app's editing pane and following the same confirmation steps. 

Activation or deactivation will happen immediately, however account members may need to refresh to see the change.

Adding custom apps

A custom app is an OAuth app added to an organization account. Custom apps can be used for integrations built by your organization, configured by your integration team, or set up by a third-party system that needs OAuth credentials from your Revizto account.

To add a custom app:

Before adding a custom app, confirm you have the redirect URIs from the third-party integration that you will be connecting to Revizto.

  1. Navigate to Developer portal in Revizto Workspace.

  2. Click + Add custom app. 

  1. In the App name field, enter the name of the app.
  2. In the Redirect URIs field, enter one or more redirect URIs. Each URI must follow the parameters described in Redirect URIs above. 
  3. In the Description field, enter a description of the app if needed.
  4. In the API notification contacts field, enter the emails of any users who should receive API-related communications from Revizto, including changes that affect your integrations.

  5. Click Add at the bottom of the Add custom app pane.

  1. In the App credentials window, copy the Client ID and Client secret. After you close the window, you will not be able to access the client secret again, so make sure to store the information somewhere secure. 

  2. Click OK. 

  1. Add the newly created client ID and client secret to the third-party integration to complete the connection.

After you save the custom app, it will be automatically activated and saved under Custom apps. 

Editing custom apps

Account owners and admins can edit the name, description, redirect URIs, and API notification emails in custom apps. Both active and inactive custom apps can be edited. If you need to get a new client secret, see Regenerating client secrets.

To edit a custom app:

  1. Navigate to Developer portal in Revizto Workspace.
  2. Click the custom app you want to edit.

  3. In the app's editing pane, edit the fields you want to change.

    If you change a redirect URI, you must also update the third-party integration configuration, otherwise, OAuth authorization attempts using the original URI will fail.

  1. Click Update at the bottom of the app's editing pane.

Deleting custom apps

Account owners and admins can delete custom apps. Only inactive apps can be deleted. Deleting an app permanently removes it from the available app integrations in the account.

To delete a custom app:

  1. Navigate to Developer portal in Revizto Workspace.
  2. Deactivate the custom app you want to delete.
  3. In the app's Actions column, click Delete .
  4. In the Delete app window, enter the app name into the confirmation field exactly as it appears in the window.

  5. Click Delete.

    You can also delete an inactive custom app by clicking Delete at the top of the app's editing pane and following the same confirmation steps. 

The app will be immediately deleted and all existing access will be revoked. If you want to add the same third-party integration again in the future, you will need to add a new custom app.

Regenerating client secrets

If the client secret for a custom app is lost, exposed, or needs to be changed, it can be regenerated. When a client secret is regenerated:

  • The previous client secret stops working immediately.
  • The new client secret is shown only once.
  • The third-party integration must be updated with the new client secret to continue working.

To regenerate a client secret:

  1. Navigate to Developer portal in Revizto Workspace.
  2. Find the custom app with the client secret you want to regenerate.
  3. In the app's Actions column, click View credentials .

  4. In the App credentials window, click Regenerate secret next to Client secret.

  1. In the confirmation window, click Regenerate secret again to confirm you want to proceed. 
  2. In the App credentials window, copy the new Client secret. After you close the window, you will not be able to access the client secret again, so make sure to store the information somewhere secure. 

  3. Click OK.

  1. Add the newly created client secret to the third-party integration to reestablish the connection.

Troubleshooting

Q: I cannot add a custom app.

A: Only account owners and admins can add custom apps. Ask the account owner or admin to update your account role or add the app for you.


 

Q: I lost the client secret for a custom app.

A: The client secret can be regenerated following the steps in Regenerating client secrets. Once it has been regenerated, immediately copy and save the new client secret someplace secure and update the third-party integration.


 

Q: Account members cannot authorize their Revizto account in the third-party integration.

A: Confirm the following:

  • The related app's status is Active.
  • The third-party integration uses the correct client ID.
  • The third-party integration uses the current client secret.
  • The redirect URI in the third-party integration exactly matches a redirect URI listed in the app's info.
  • The user has access to the Revizto account.


 

Q: Account members could connect to an app before, but they can't anymore.

A: Confirm the following:

  • The app's status is still Active.
  • The app was not deleted.
  • The client secret was not regenerated without updating the third-party integration.


 

Q: I don't see the Revizto MCP Server app in my available apps. 

A: The Revizto MCP Server app is a preconfigured app and must be activated for the account. Ask the account owner or admin to confirm the Revizto MCP server app is active in Developer portal.

Related articles