> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onesauce.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & access

> How sign-in works and what your assistant can access.

## How sign-in works

When you connect, your assistant sends you to the Onesauce sign-in page. You sign in with your normal Onesauce login, and the assistant gets an access token tied to you. It never sees your password.

* **The assistant acts as you.** It sees what you can see in Onesauce and nothing more. Your role, territory and organization settings apply as usual.
* **Tokens expire after an hour** and renew automatically while you stay connected.
* **Credits are yours.** Actions that use credits in the app use them here too. See [Tools](https://docs.onesauce.ai/tools/overview.md).
* **Changes are real.** Check-ins and notes made through an assistant run the same steps as in the app, including CRM sync, webhooks and closing due follow-ups.

## Scopes

Each tool needs a scope. Your assistant asks for these scopes when you connect.

| Scope | Allows |
| - | - |
| `brands:read` | Looking up restaurants by website and checking CRM status |
| `brands:search` | Searching for brands |
| `checkins:write` | Reading check-in types and logging check-ins |
| `notes:write` | Adding notes |
| `activity:read` | Reading your notes, visits, reminders and recent activity |
| `tasks:write` | Setting, completing and prioritizing reminders |
| `lists:read` | Reading your saved lists |
| `lists:write` | Saving restaurants to lists |

The assistant can only use Onesauce features covered by these scopes. Account settings, billing, user management, exports and contact data aren't available to it.

> [!NOTE]
>
> When Onesauce adds a tool that needs a new scope, reconnect your assistant to grant it.

## What your assistant provider sees

Tool results, such as restaurant details, your notes and CRM owner names, are sent to the assistant you're using so it can answer you. Your assistant provider's data policies apply to that content. If your organization limits which AI tools can see CRM data, check with your admin before connecting.

## Removing access

Disconnect Onesauce in your assistant's connector settings. That stops the assistant from making new requests. Data you created through it, such as check-ins and notes, stays in Onesauce.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.