How-to kite connect connected apps revoke access sensibull smallcase streak

How to revoke connected apps on Kite

From WebNotes, a public knowledge base. Last updated . Reading time ~10 min.

Revoking a connected app on Kite removes a third-party platform’s standing permission to access your Zerodha account. On Kite web you click your client ID, then My Profile, then Apps, then Revoke against the app; on the Kite app you tap your client ID, then Connected Apps, then the app, then Revoke. The action removes that app’s permission to access your trading data and account information, so a platform like Sensibull , smallcase or Streak can no longer read your holdings or place orders until you authorise it again.

This guide is for the Zerodha client who has connected one or more third-party apps through Kite Connect or the “Login with Kite” flow and wants to cut one off, because the app is no longer used, because access should be tidied up, or because a connection looks unfamiliar. The procedure is short and reversible. The one distinction worth holding from the start is between revoking an app, which removes a third party’s access, and logging out, which only ends your own Kite session; they are different actions with different effects.

Conflict-of-interest disclosure. This guide is published by the WebNotes Editorial Team for informational purposes and is written independently. WebNotes operates a Zerodha account-opening referral programme, disclosed on the pages that carry the referral link; this guide does not carry it and earns no referral commission from the procedure described here.

Step-by-step procedure

The numbered box at the top sets the sequence. The detail below expands the two points that catch people out: the web-versus-app path difference, and the difference between revoking and logging out.

1. Decide whether to revoke or simply log out

These are not the same action. Revoking removes a third-party app’s standing permission to read your account and, where granted, to place orders. Logging out only ends your own active Kite session and leaves connected apps in place. If your concern is that smallcase, Sensibull or Streak holds access you no longer want, revoke. If you only want to end a trading session, for example on a shared computer, use Logout instead. Choosing the wrong one leaves the actual problem untouched.

2. Open your profile in Kite

On Kite web, click your client ID at the top right of the screen, then click My Profile. On the Kite mobile app, tap your client ID to open the account section. Both routes lead to the same place: the part of your account where the connected-apps list is held. The path differs only in the label, My Profile on web, the account section on the app.

3. Open the connected-apps list

On Kite web, click Apps. On the Kite app, tap Connected Apps. The list shows every third-party platform you have authorised through Kite Connect or Login with Kite. This is where Sensibull, smallcase, Streak and any personal Kite Connect app you created appear together. If you have never connected anything, the list is empty; if it shows an app you do not recognise, treat that as a security signal and read the cyber-security note below before doing anything else.

4. Select the app to disconnect

On the Kite app, tap the specific app first to see its permissions before you remove it, which is useful when you are not sure what a given connection does. On Kite web, the Revoke control sits directly against each app in the list, so you do not need a separate selection step. Confirm you have the right app, since revoking the wrong one cuts access to a platform you may still use.

5. Tap Revoke

Click or tap Revoke against the app. This removes that app’s permission to access your trading data and account information. From that point the app cannot read your holdings or place orders on your behalf until you reauthorise it. The action takes effect immediately; there is no waiting period and no charge.

6. Confirm and re-check the list

Refresh the Apps list and confirm the revoked app has gone. Then run an eye down the rest of the list and revoke any other app you no longer use, so only the platforms you actively rely on keep access. Periodic pruning of this list is basic account hygiene, the same discipline as reviewing which apps hold permissions on a phone.

What revoking does, and does not, do

Revoking is about access, not ownership. When you connect a platform through Kite Connect or Login with Kite, you grant it an authorised session against your account so it can read data and, in some cases, place orders through the Kite Connect order API . Revoking removes that authorisation. The app loses its ability to act on your account, but anything it already did stands: a smallcase you bought stays in your demat account , a Streak strategy’s past orders remain executed, and your holdings are unaffected. You have cut the app’s future access, not unwound the past.

Revoking also does not touch your own session. Your Kite login stays active after you revoke a connected app; the two are independent. This is why revoking is the right tool for a tidy-up or a security concern about a third party, and logging out is the wrong one. If your worry is instead that your own session is open somewhere it should not be, logging in on another browser invalidates the previous Kite session, which is a separate behaviour from revoking a connected app.

Why this matters for account security

A connected app is a standing permission. Until you revoke it, a platform you authorised months ago can still read your trading data and, depending on the scope you granted, place orders. That is the intended design that lets Sensibull build option strategies, smallcase rebalance baskets and Streak deploy automated strategies on your behalf. The same standing access is also why an unused or unfamiliar connection is a risk worth closing. If you spot an app in the list you do not recognise, revoke it, then change your password and review your login security; the Zerodha cyber security entry covers the wider hygiene, and you can secure a trading account with two-factor authentication and a device lock on Kite .

The list is also worth reviewing when you stop using a service. People often connect a tool to try it, then forget it retains access. Treat the Apps list the way you would the app-permissions screen on a phone: revoke what you no longer use, and keep only the connections you actively rely on. For specific platforms, the entries on how to exit a smallcase position , how to use the Sensibull strategy builder and how to deploy a Streak strategy live cover what each connection is for before you decide to cut it.

See also

External references

References

  1. Zerodha support, How to revoke access for apps logged in via Kite, giving the Kite web path (client ID, My Profile, Apps, Revoke) and the Kite app path (client ID, Connected Apps, app, Revoke), and stating that revoking removes the app’s permission to access trading data and account information (as of 20 June 2026).
  2. Zerodha, Free personal APIs from Kite Connect, describing Kite Connect as the API suite that lets platforms such as smallcase, Sensibull and Streak build on Zerodha while Zerodha handles execution and regulatory compliance (as of 20 June 2026).
  3. SEBI investor-protection guidance on reviewing and limiting third-party access to trading accounts.

WebNotes Editorial Team prepares factual how-to guides based on publicly available broker disclosures. WebNotes is not affiliated with Zerodha Broking Limited, Sensibull, smallcase or Streak. App interfaces change; verify the current steps at support.zerodha.com before acting.

Related articles

Frequently asked questions

How do I revoke a connected app on Kite?
On Kite web, click your client ID, then My Profile, then Apps, then Revoke against the app. On the Kite app, tap your client ID, then Connected Apps, then the app, then Revoke. This removes the app’s access to your trading data and account information.
Does revoking an app log me out of Kite?
No. Revoking a connected app removes that third-party app’s access to your account, but it does not end your own Kite session. You stay logged in to Kite. To end your trading session, use the Logout option separately.
Which apps appear under Connected Apps on Kite?
Every third-party platform you authorised through Kite Connect or Login with Kite appears there, including Sensibull, smallcase and Streak, along with any personal Kite Connect app you created. Each can read or act on your account until you revoke it.
What happens to a smallcase or Streak strategy after I revoke access?
Revoking removes the app’s permission to access your Zerodha account, so it can no longer read holdings or place orders on your behalf until you reauthorise it. Investments already in your demat stay yours; only the app’s access is cut.
Why should I revoke apps I no longer use?
A connected app holds standing permission to read your trading data and, in some cases, place orders. Removing access for apps you no longer use reduces the number of third parties that can act on your account, which is basic account hygiene.
How do I reconnect an app after revoking it?
Open the app and run its Login with Kite or connect flow again. You authorise it afresh, which creates a new connection in your Kite Apps list. Revoking is reversible; it does not permanently bar the app.

Reviewed and published by

WebNotes Editorial Team

The WebNotes Editorial Team covers Indian capital markets, payments infrastructure and retail investor procedures. Every article is fact-checked against primary sources, principally SEBI circulars and master directions, NPCI specifications and the official support documentation published by the intermediary in question. Drafts go through a second-pair-of-eyes review and a separate compliance read before publication, and revisions are tracked against the SEBI and NPCI rule changes referenced in the methodology section.

Last reviewed
Conflicts of interest
WebNotes is independent. No relationship with any broker, registrar or bank named in this article.