-
In the upper-right corner of any page on GitHub, click your profile picture, then click Settings.
-
In the "Integrations" section of the sidebar, click Applications.
-
Click the Authorized OAuth Apps tab.

-
Review the tokens that have access to your account. For those that you don't recognize or that are out-of-date, click , then click Revoke. To revoke all tokens, click Revoke all.

This version of GitHub Enterprise Server will be discontinued on 2026-08-25. Discontinued releases are not supported. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features in GitHub Enterprise Server, see Overview of the upgrade process. For help with the upgrade, GitHub Enterprise Support.
Reviewing your authorized OAuth apps
You should review your authorized applications to verify that no new applications with expansive permissions are authorized, such as those that have access to your private repositories.