Partner app installs are the partner apps a merchant has connected to its Flint account. Use these routes as the merchant to see which apps can reach its data and to disconnect one. Both routes cover live and test mode, so they need a live API key: test keys get 403 FORBIDDEN with details[0].reason live_mode_required, and partner install tokens get 401 INVALID_CREDENTIAL with details[0].reason wrong_credential_type.
Building the app instead? The Partner app installs guide covers installing, the events your app receives when a merchant disconnects, and the app owner's install routes under Partner apps.
List installed apps#
GET /v1/partner-app-installs with developer.partner_apps.read lists the selected merchant's installs across all apps, including each install's environment grants. It includes revoked installs unless you filter them out, and never returns other merchants' installs, even for an app you own.
curl "https://api.withflintpay.com/v1/partner-app-installs?status=active" \
-H "Authorization: Bearer $FLINT_API_KEY"
Filter with partner_app_id, and with status (pending_exchange, active, revoked). Repeat status or separate values with commas to match more than one. A page_token only works with the filters it was issued for.
Each install has the app's partner_app_id and current partner_app_name, its status, and revoked_by (merchant or partner_app) when known. Each environment grant lists granted_permissions, the app's permissions it holds with their titles, descriptions, and scopes, and granted_scopes, the Flint API scopes the app can use in that mode.
GET /v1/developer/partner/installs returns the same list and also accepts an onboarding session.
Disconnect an app#
POST /v1/partner-app-installs/{partner_app_install_id}/revoke with developer.partner_apps.write disconnects the app. Flint revokes the install, its environment grants, and its refresh tokens, so the app's access tokens stop working and it stops receiving events for this merchant. The app is sent partner_app_install.revoked with revoked_by merchant.
curl -X POST https://api.withflintpay.com/v1/partner-app-installs/pinst_123/revoke \
-H "Authorization: Bearer $FLINT_API_KEY"
Revoking a revoked install returns it unchanged. Another merchant's install returns 404 PARTNER_APP_INSTALL_NOT_FOUND. To reconnect, install the app again from the app's install link.
