Permissions and access

Integrations inherit the permission model of the underlying tool plus Agentication agent rules. Engineering agents should stay approval-aware for writes; business agents should respect customer data policies.

Engineering integrations

• Prefer read scopes for investigation; separate scopes for opening PRs or triggering deploys.
• Dave Doctor does not deploy without human approval in the public product narrative.

Business integrations

• Limit which roles can connect messaging or CRM systems.
• Do not expose internal-only knowledge to public website widgets without review.

Next steps

Read Security and permissions in the Trust section.