SDK equivalent
status=active|revoked, apply updated_since checkpoints, and page with limit.
Each item contains:
authorization_id,organization_id, and app-scoped user identifiersstatustransitions (active/revoked)updated_attimestamps to help you enforce SLAs downstream