App review and the directory
Every app works the moment you create it. Review adds the Verified badge, removes the warning on the consent screen, and lists your app in the public directory.
Badges
Unverified app
- Default for every new app, including apps created by dynamic registration.
- The consent screen shows an Unverified app warning.
- The consent screen is shown on every authorization.
- Not listed in the directory.
Verified
- Granted after a RocketVerifier reviewer approves the app.
- The consent screen shows a Verified badge next to your name.
- Returning users who already granted every requested scope skip the consent screen.
- Listed at rocketverifier.com/apps.
Submit for review
- Open your app in Dashboard > Developer apps.
- Fill in the listing: name, logo, short description, homepage, privacy policy URL, terms URL, support contact, and the scopes your app requests.
- Test the full flow yourself with your own account, including disconnect.
- Click Submit for review. The status changes to In review.
A reviewer approves the app, or rejects it with a note that says what to change. Fix the issues and submit again. Your app keeps working while it is in review or after a rejection; it stays Unverified.
Changing the name, logo, or scopes of a Verified app sends it back for review. Existing connections keep working in the meantime.
What reviewers check
Working homepage
The homepage URL loads, describes your product, and makes clear how it uses RocketVerifier.
Privacy policy and terms
Both URLs are public, load without a login, and the privacy policy says what you do with email addresses and verification results.
Minimal scopes
Every requested scope maps to a feature a reviewer can find. Unused write scopes are removed.
Accurate name and logo
The name and logo are yours and match the product the user lands on. No RocketVerifier logo as your app icon.
No impersonation
The name, logo and description do not suggest you are RocketVerifier or another company you do not represent.
Correct redirect URIs
Production redirect URIs use https on a domain you control. Remove leftover test URIs you no longer need.
Support contact
A support email or page that a user can reach if something goes wrong.
Disconnect handling
Your app handles grant.revoked and invalid_grant by deleting tokens and offering to reconnect.
Suspension
Suspension stops every token at once
RocketVerifier can suspend an app that abuses users' credits, misrepresents itself, or leaks tokens. When an app is suspended, every access and refresh token issued to it stops working immediately: the API returns 401 invalid_token and the token endpoint returns invalid_client. No grant.revoked webhook is sent, because the connections are paused, not deleted. If the suspension is lifted, existing connections work again.
The reason is shown on your app's page under Developer apps. Contact support to appeal once the issue is fixed.
The app directory
Verified apps are listed at rocketverifier.com/apps, where RocketVerifier users browse tools that work with their account. Each listing has its own page.
| Listing field | Source |
|---|---|
| Name, logo, short description | Your app settings |
| Homepage and Connect link | Your homepage URL |
| Permissions | The scopes your app requests, in consent screen language |
| Privacy policy, terms, support | Your app settings |
| Verified badge | Set by review |
Listing is part of verification. Suspended apps are removed from the directory. Scope wording comes from the Scopes page.