> ## Documentation Index
> Fetch the complete documentation index at: https://docs.borghq.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Connected Apps

> Review and disconnect the apps you allowed to use Odin on your behalf

A connected app is an app, such as Claude, that you signed in to with your Odin account so it can use the [Odin MCP server](https://docs.borghq.io/platform/odin-mcp.md) for you. Each connection belongs to one person and one organisation.

Connected apps are listed under **Connected apps** on the **Workspace > AI agents** page, below the steps for [connecting an agent](https://docs.borghq.io/platform/odin-mcp.md#setting-up). The sidebar shows **AI agents** to Members and above. Everyone can also reach the list from **Edit Profile > Linked accounts > Manage connected apps**, or by searching for **AI agents** in the command palette (`Cmd/Ctrl + K`).

## What you see

| Column | Meaning |
| - | - |
| **App** | The name the app gave itself, and the web address it signs in through. Odin cannot verify an app's name, so check the address. |
| **Organisation** | The organisation you connected the app to. |
| **Access** | **Read** or **Read & write**. See [What an app can do](#what-an-app-can-do). |
| **Last used** | When the app last used or renewed its access. |
| **Connected** | When you allowed access. |

On a small screen, the organisation and last-used time appear under the app name.

### Admins and owners

If you are an admin or owner of your current organisation, the list has two tabs:

* **Yours**: the apps you connected, in every organisation.
* **Everyone**: every app connected to the current organisation, with the person who connected it.

Members and read-only members only see their own apps.

## Connecting an app

You add Odin in the app itself; **Workspace > AI agents** has the steps for each client. When the app asks you to sign in to Odin:

**1. Sign in to Odin**

Use your usual sign-in method: email code, Google, passkey or your organisation's single sign-on. If you are already signed in, Odin skips this step.

**2. Check the app**

The consent screen shows the app's name and the address Odin will send you back to, for example `claude.ai`. If the app runs on your computer, such as Claude Code, Odin warns you; only continue if you started the connection yourself.

**3. Choose one organisation**

Pick the organisation the app may use. Odin lists the organisations where you are a **Member**, **Admin** or **Owner**. To use the app with a second organisation, connect it again.

**4. Choose the access**

If the app asks to make changes, choose **Read only** or **Read & write**. See [What an app can do](#what-an-app-can-do). The app gets exactly what you choose. If it only asks to read, there is nothing to choose.

**5. Allow access**

Select **Allow access** and confirm with a [step-up verification](https://docs.borghq.io/platform/step-up-verification.md). Odin then returns you to the app.

Select **Cancel** to return to the app without granting access.

## What an app can do

| Access | The app can |
| - | - |
| **Read** | View findings, assets, pentests, retests and finding discussions. |
| **Read & write** | Everything in Read, and change finding status and assignee, link pull requests, and post or edit finding discussion messages. |

An app acts as you. It never gets more access than your role in the organisation. If your role changes to **Read only**, the app stops working on its next request, and its connection ends the next time it renews its access. If you leave the organisation, Odin disconnects your apps for it straight away, and they stay disconnected if you are invited again.

If an organisation requires single sign-on, you must be signed in with that organisation's SSO to connect an app to it. Odin shows the organisation but does not let you select it until you do.

## How long a connection lasts

An app renews its access automatically while you use it. A connection that is unused for 30 days expires, and the app asks you to sign in again.

## Disconnecting an app

Open the actions menu (**⋯**) next to the app, or right-click its row, select **Disconnect** and confirm. The app loses access straight away and any request it makes afterwards fails. To use the app again, connect it again from the app.

Admins and owners can disconnect anyone's app in their organisation from the **Everyone** tab. Disconnecting is always available, even when the organisation's trial has ended or its plan has lapsed.

> [!NOTE]
>
> Disconnecting an app in Odin does not remove the connection from the app's own settings. Remove it there too if you no longer want to see it.

> **[Odin MCP Server](https://docs.borghq.io/platform/odin-mcp.md)**
>
> Tools available to connected apps and how to add the server to your client

> **[API Keys](https://docs.borghq.io/platform/api-keys.md)**
>
> Organisation keys for scripts, CI and clients that do not support sign-in


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.