Connectors
Connectors and tokens
Interactive hosts use Connector OAuth. Unattended CI uses a Workspace Automation Actor with an Automation Access Token.
Connector OAuth
Hosts such as Claude, Cursor, ChatGPT, Grok and Muse open Tiora’s OAuth consent. You pick one workspace. Access is limited to that workspace and the scopes you grant.
Automation access tokens
Workspace owners and admins create API keys for automation actors in Settings → API keys. Store the secret in CI. Tokens can be revoked without changing human accounts.
Security boundaries
MCP and the public API share the same audience and permission model. Agents never bypass workspace roles. Revoke a connection or key from Settings when a host should lose access.