---
title: "What a connection can see and do"
description: "What a connected agent can reach, which tools change data, how long a sign-in lasts, and how to disconnect one."
canonical: "https://www.togohq.ai/docs/mcp/security"
applies_to: "mcp.togohq.ai/mcp"
updated: "2026-11-03T00:00:00Z"
---

# What a connection can see and do

What a connected agent can reach, which tools change data, how long a sign-in lasts, and how to disconnect one.

## It acts as you

A connection reaches **every project you are a member of**, across your organizations, with the
access you approved — no more than you could do in the dashboard. Each call names one project,
and Togo checks your membership of that project on every call. A project you cannot reach is
refused the same way whether it exists or not.

## What changes data

Only a **Read and change** connection sees the tools that change data: defining or editing an
event, merging two events, editing a person's profile or a defined profile property, creating a
project, editing a project's settings, and creating write keys. Each one also needs your role in
the project's organization to allow agent changes, checked again on every call — so a demotion
takes effect on the next request.

**Merging two events cannot be undone.** The tool's own description tells the agent to confirm
with you first.

The read tools never change anything. The [MCP tools reference](/docs/reference/mcp-tools) marks
every tool with which connection it needs and whether it changes data.

## Prefer read only where you can

The data an agent reads includes text that strangers can send — event names and property values
arrive through your public write key. An agent with **Read and change** that reads such text could
be steered into a change. A **Read only** connection removes that path, so give write access to
the agent that maintains your tracking and read-only access to the ones you ask questions.

## What a connection never needs

A secret key. Write keys are public and can only send events; the OAuth sign-in your browser
approved is the connection's only credential, and it can be revoked at any time.

## How long a sign-in lasts

A connection that is used stays signed in, up to one year from when you approved it. One left
idle signs out after **90 days** for clients whose publisher Togo recognises — Claude and Claude
Code, ChatGPT and Codex, and VS Code — and after **30 days** for any other client, Cursor included
for now. The approval page shows the publisher when it is recognised. Togo emails you whenever a
new connection is approved.

## Disconnect an agent

Open [app.togohq.ai/account](https://app.togohq.ai/account) and find **Connected apps**: every
agent or app signed in as you, with when it was last used. Revoke one and its next call is
refused. **Sign out everywhere** on the same page ends every browser session and every connected app at
once.