AI Agents

Connect Claude, or any AI app that supports MCP connectors, to your workspace and work in it by asking. The agent works as you, with your permissions, and never more.

Connecting an Agent

1. Open AI Agents in the workspace menu and copy the connector address, https://cascadiawebservices.com/ops/mcp.
2. In Claude, open Settings, then Connectors, choose Add Custom Connector, and paste the address. Other AI apps that support MCP connectors work the same way.
3. Your browser opens the approval screen. It shows which app is asking, which workspace it will work in, what it can and can never do, and the site it sends you back to. Sign in first if you are asked to.
4. Choose Approve or Decline. Nothing is connected until you approve.

Each person connects their own agents. An agent you connect works as you, not as anyone else.

What an Agent Can Do

• See and change the records you can see and change, with exactly the same checks as your screens.
• Read Home, your apps, modules, the people list, and usage.
• Add modules and fields. Anything an agent adds is saved turned off until a person in your company turns it on.
• In Helpdesk, read tickets and add internal notes.

What an Agent Can Never Do

• Change people, roles, or anyone's access.
• See or change billing, API connections, or other AI agents.
• Export, import, or delete modules and fields.
• Reply to a customer by email, or send any email to a client. That always stays with a person.
• Do anything you cannot do yourself.

Every change an agent makes goes through the same checks as the screens and is marked as made by an AI agent in the activity log and in each record's history. Changes made by AI agents are also counted on their own in Usage.

Seeing and Disconnecting Agents

AI Agents lists the agents you connected (action core.agents.list): their name, the site they belong to, when you connected them, and when they last worked. Owners and admins see everyone's connected agents.

Choose Disconnect (action core.agents.revoke) to end a connection. It stops working on its very next request. Changes it already made stay, marked as made by an AI agent. You can connect it again at any time. Owners and admins can disconnect anyone's agent. When a person's access is turned off, their agents stop working too.

How the Connection Is Protected

• The agent signs in with OAuth 2.1 and PKCE. It never sees your Cascadia password or your workspace session.
• Its access lasts an hour at a time and renews itself. Each renewal works once: if an old one is ever used again, the connection ends at once and must be approved again.
• Every request is checked against your company's own record of the connection, so a disconnected agent is refused immediately.