It acts as you
A connection reaches every project you are a member of, across your organizations, with the access you approved — no more than you could do in the dashboard. Each call names one project, and Togo checks your membership of that project on every call. A project you cannot reach is refused the same way whether it exists or not.
What changes data
Only a Read and change connection sees the tools that change data: defining or editing an event, merging two events, editing a person’s profile or a defined profile property, creating a project, editing a project’s settings, and creating write keys. Each one also needs your role in the project’s organization to allow agent changes, checked again on every call — so a demotion takes effect on the next request.
Merging two events cannot be undone. The tool’s own description tells the agent to confirm with you first.
The read tools never change anything. The MCP tools reference marks every tool with which connection it needs and whether it changes data.
Prefer read only where you can
The data an agent reads includes text that strangers can send — event names and property values arrive through your public write key. An agent with Read and change that reads such text could be steered into a change. A Read only connection removes that path, so give write access to the agent that maintains your tracking and read-only access to the ones you ask questions.
What a connection never needs
A secret key. Write keys are public and can only send events; the OAuth sign-in your browser approved is the connection’s only credential, and it can be revoked at any time.
How long a sign-in lasts
A connection that is used stays signed in, up to one year from when you approved it. One left idle signs out after 90 days for clients whose publisher Togo recognises — Claude and Claude Code, ChatGPT and Codex, and VS Code — and after 30 days for any other client, Cursor included for now. The approval page shows the publisher when it is recognised. Togo emails you whenever a new connection is approved.
Disconnect an agent
Open app.togohq.ai/account and find Connected apps: every agent or app signed in as you, with when it was last used. Revoke one and its next call is refused. Sign out everywhere on the same page ends every browser session and every connected app at once.