Review and revoke agent access

Before you start

An agent connection uses the permissions approved by a person for a specific workspace. The person must retain access to that workspace. Workspace owners and admins can manage workspace connections; members can revoke their own grants.

Review a connection

1. Open Agents in the workspace you want to inspect.
2. Find the client in Connected agents & apps. Where Scoped recognizes a connected provider, its tile shows Connected; click anywhere on the tile to open its setup or management details.
3. Review its authorizers, permissions, and recent usage where shown.
4. Confirm that the access still matches the work you want the agent to do.

Disconnect an agent

1. Choose Disconnect for the connection you want to revoke.
2. Review the confirmation, including whose access will be affected in this workspace.
3. Confirm the disconnection and check the result.

Revocation prevents subsequent authentication, including refresh. A request already authorized before revocation may finish. Another workspace’s separately approved connection is not revoked by this action.

Reconnect when needed

Run the client’s connection flow again, choose the workspace, and approve the intended permissions. For Codex, follow Connect Codex to Scoped. Reconnecting is also required when a restore has invalidated workspace grants.

Understand the boundaries

Switching the browser’s selected workspace does not switch an agent token’s workspace. Removing a person’s membership invalidates their associated access. External agents and their model providers may process the information they retrieve.