# Flexpa Connections

## [#](https://www.flexpa.com/docs/connections#introduction) Introduction

[Flexpa Connections](https://connections.flexpa.com/) keeps patients in control by allowing them to manage which applications can access their health plan data through [Flexpa API](https://www.flexpa.com/docs/records).

#### [#](https://www.flexpa.com/docs/connections#getting-started) Getting started?

[**Quickstart** Get started with a cloneable quickstart project\
\
* * *\
\
Try it out →](https://www.flexpa.com/docs/guides/quickstart)

#### [#](https://www.flexpa.com/docs/connections#looking-for-a-demo) Looking for a demo?

[**Try it yourself** Go through a Patient Access API flow yourself! See exactly what patients will see\
\
* * *\
\
Try it yourself →](https://my.flexpa.com/connect)

## [#](https://www.flexpa.com/docs/connections#how-it-works) How it works

Patients review a list of connected applications and may choose to disconnect an application.

- Patients log into [connections.flexpa.com](https://connections.flexpa.com/) using their health plan credentials
- Flexpa Connections displays all applications connected to that health plan through [Flexpa Consent](https://www.flexpa.com/docs/consent)
- The patient has the option to **Disconnect** any application to prevent that application from continuing to access their health plan data through [Flexpa API](https://www.flexpa.com/docs/records)

## [#](https://www.flexpa.com/docs/connections#disconnected-applications) Disconnected applications

When a patient disconnects a health plan from an application, all of the application's access tokens associated with that patient are invalidated. If the application attempts to use these access tokens after revocation, [Flexpa API](https://www.flexpa.com/docs/records) will return an error:

```json
{
  "statusCode": 401,
  "error": "Unauthorized",
  "message": "Invalid access token"
}
```

The patient can reauthorize access to the application at any time by going through the [Flexpa Consent](https://www.flexpa.com/docs/consent) flow again with their health plan credentials.

## [#](https://www.flexpa.com/docs/connections#revoke-authorizations-via-api) Revoke authorizations via API

Alternatively, access tokens can be revoked programmatically by calling [`/link/revoke`](https://www.flexpa.com/docs/records#revoke).

© 2026 Flexpa. All rights reserved. FHIR® is the registered trademark of Health Level Seven International and the use does not constitute endorsement by HL7.