Connecting your AI agent

What the connector does

brainattic exposes your workspace to AI agents through the Model Context Protocol (MCP). The kb_* tools let a connected agent list, search, read, create, and edit the documents, projects, groups, attachments, and reminders of the workspaces it is entitled to — the same content your team sees in the web app, under the same permission rules.

Authorization

A connector authorizes with OAuth against our identity provider and receives the kb:access scope bound to your account. Fine-grained rights (who may read, write, or delete what) are decided inside brainattic by your workspace's role settings — the connector can never exceed what your account is allowed to do.

Per-tenant isolation

Every token names the workspaces your account belongs to; every tool call is confined to them. Content of other customers is structurally unreachable — isolation is enforced on every query, not by convention.

Read, write, destructive

Read tools (list, get, search) only retrieve. Write tools (create, update, edit sessions) modify content and record every change with authorship and revision history. Destructive tools (delete, archive) are separated and permission-gated, and everything an agent does lands in the workspace audit log — reviewable by your admins at any time.