Connect an AI app with OAuth and manage its access
Open **Settings → Connected AI → Connect**. Choose the relevant app card and follow its displayed connection guide. An OAuth connection asks you to authorize workspace access without copying a personal token. Use the exact workspace MCP server URL shown by Fusion.
Approve a connection
When the Fusion authorization page opens, confirm the app, signed-in staff account, workspace, and browser redirect destination. Approve only a connection you started. Under **Requested access**, clear permissions you do not want to grant, then choose **Approve**. Use **Deny** to refuse the request.
Read the permission matrix
Viewing information and performing actions such as writing, sending, and publishing are separate. Permissions your role cannot grant are disabled. Review the selected groups before approval rather than assuming an app needs every available action.
Manage connected apps
Return to **Settings → Connected AI → Connections**. The combined table distinguishes **Connected app** from **Personal token** and lists Permissions, Last used, and Expires. Use **Disconnect** on the intended app and confirm when it should lose access. It must connect again to regain access. Authorized managers can use **Show all staff**.
Expired request or missing tools
If the request is expired or unavailable, restart the connection from the AI client. If a newly available tool requires permissions absent from an existing connection, reconnect with the intended permissions and refresh the client’s tools. Workspace feature access and current staff permissions still apply.
If Connected AI is disabled or you lack approval permission, ask an authorized workspace administrator. A successful demo or copied sample prompt does not create an authorized connection.