Review and revoke agent access
Inspect connected agents, understand workspace permissions, and disconnect an agent you no longer want to authorize.
Before you start
An agent connection uses the permissions approved by a person for a specific workspace. The person must retain access to that workspace. Workspace owners and admins can manage workspace connections; members can revoke their own grants.
Review a connection
- Open Agents in the workspace you want to inspect.
- Find the client in Connected agents & apps. Where Scoped recognizes a connected provider, its tile shows Connected; click anywhere on the tile to open its setup or management details.
- Review its authorizers, permissions, and recent usage where shown.
- Confirm that the access still matches the work you want the agent to do.
Disconnect an agent
- Choose Disconnect for the connection you want to revoke.
- Review the confirmation, including whose access will be affected in this workspace.
- Confirm the disconnection and check the result.
Once disconnected, the agent can’t reach this workspace again until someone reconnects it. Anything it had already started may finish. Connections approved for other workspaces aren’t affected.
Reconnect when needed
Run the client’s connection flow again, choose the workspace, and approve the intended permissions. Follow Connect Codex to Scoped or Connect Claude Code to Scoped. You’ll also need to reconnect after a workspace is restored from a backup.
Understand the boundaries
Switching workspaces in your browser doesn’t move an agent’s connection to the other workspace. Removing someone from the workspace ends their agents’ access too. External agents and their model providers may process the information they retrieve.