# Connected apps

Source: https://kirora.io/docs/guides/integrations/connected-apps

See the AI apps you've let into a workspace by signing in, what they can do, and how to disconnect them.

A connected app is an AI app, such as Claude or ChatGPT, that you've let into a workspace by signing in to Kirora and choosing **Allow**, rather than by pasting a key. It can read the workspace and draft work for you to review. It can never send.

Anyone in the workspace can connect an app for themselves, whatever their role. Each person sees and disconnects only the apps they connected.

> [!NOTE]
> Tools such as Zapier, Make and n8n don't appear here. They connect with an API key made on their page under **Integrations**. See [Connect an integration](https://kirora.io/docs/guides/integrations/connect-an-integration).

## Connect an app

1. In your AI app, add Kirora as a connector using the **MCP server URL** shown on **Developer › Agent access**. Your developer can find the details in the [agents setup guide](https://kirora.io/docs/api/agents).
2. The app opens a Kirora page that says it *wants access to* your workspace, and lists what *It will be able to* do.
3. If you belong to more than one workspace, choose the right one under **Workspace**. Choosing another reloads the request for that workspace.
4. Choose **Allow**, or **Cancel** to refuse.

If the page says *This request has expired or was already answered*, start again from the app.

If you'd rather use a key, which an admin, a developer or the owner creates and which isn't tied to one person, see [Connect Claude, Cursor or another AI assistant](https://kirora.io/docs/guides/kiro-ai/use-kiro-ai-with-claude-or-cursor).

## What a connected app can do

The app gets one of two levels of access, shown in the **Access** column:

| Access | What the app can do | Who can grant it |
| --- | --- | --- |
| **Read and draft** | See your campaigns, journeys, segments, templates and results, and draft and edit them | Authors, members, admins and the owner |
| **Read only** | See them, without changing anything | Anyone, including viewers. A viewer's connection always reads only |

A connected app also works within your own role, so it can never do more than you could in the dashboard, and it has the same limits as an agent key:

- It can't send or schedule a campaign, activate a journey, send a transactional message or a push notification, or add, change or delete contacts.
- Any campaign or journey it creates or edits waits in **Developer › Agent review** until an admin or the owner approves it. See [Approve agent work](https://kirora.io/docs/guides/kiro-ai/use-kiro-ai-with-claude-or-cursor#approve-agent-work).
- Attributes hidden from your role stay hidden from the app.

If your role changes, the app's access changes with it at once.

## See and disconnect your apps

Go to **Settings › Account › Connected apps**. The table lists each **App**, its **Access** and when it was **Connected**.

To disconnect one, choose **Disconnect**, then **Disconnect** again to confirm. The app loses access to the workspace at once. To use it again, connect it again.

A connection also ends:

- **When you leave the workspace or are removed.** If you're invited back later, you connect your apps again.
- **When an admin, a developer or the owner revokes it.** Each connected app appears in **Developer › API keys** as an **Agent** key named after the app with *(connected app)*. Revoking that key disconnects the app. See [API keys and webhooks](https://kirora.io/docs/guides/integrations/api-keys-and-webhooks#revoke-a-key).
- **After 30 days without use.** The app asks you to connect again.

## Frequently asked questions

### Does connecting an app need a paid plan?

No. Connected apps and agent keys work on every plan.

### Can an admin see my connected apps?

Admins, developers and the owner see each one as an agent key in **Developer › API keys**, with when it was last used, and can revoke it. Only you see them under **Settings › Account › Connected apps**.

### Can a connected app see contacts' personal details?

It can read the contact details your role can see, except attributes hidden from your role. To keep text your contacts typed, such as names, out of an AI app, connect it with an agent key instead and turn on the option that hides contact fields. See [Keep contact details out of the assistant](https://kirora.io/docs/guides/kiro-ai/use-kiro-ai-with-claude-or-cursor#keep-contact-details-out-of-the-assistant).

## Next steps

- [Connect Claude, Cursor or another AI assistant](https://kirora.io/docs/guides/kiro-ai/use-kiro-ai-with-claude-or-cursor)
- [API keys and webhooks](https://kirora.io/docs/guides/integrations/api-keys-and-webhooks)
- [Security and access](https://kirora.io/docs/guides/account/security-and-access)