# What Data Can Claude Access Through Connectors? How to Limit It to Specific Folders

Claude's connectors can read whatever the connected account can open in Google Drive, OneDrive, Dropbox or Box, and ChatGPT's apps work the same way. Neither vendor documents a way to limit a drive connector to one folder. This guide covers what each connector reaches, what admins can control, and how to give an assistant only the folders it needs.

Source: https://fast.io/resources/what-data-can-claude-access-through-connectors/
Author: [Tom Langridge](https://fast.io/authors/tom-langridge/)
Last reviewed: 2026-10-23

## What Data Can Claude Access Through Connectors?

Claude can access the data that the account you connect can already open in that service, and nothing beyond it. Anthropic says Claude inherits each person's permissions from the connected service, so a Google Drive, OneDrive, Dropbox or Box connector can search and read any file that person's account can reach, and Anthropic documents no setting that limits a drive connector to one folder.

Anthropic describes connectors as a way for Claude to access your apps and services, retrieve your data and take actions in them. Its rule for reach is short: if someone can't open a file in the source system, the connector can't reach it from Claude either. A custom connector that signs in with a shared credential reaches whatever that credential can access.

Claude's permission settings narrow actions, not content. An owner can let Claude read files in Google Drive while blocking it from creating or editing documents, and Anthropic says these restrictions never grant more access than the source system allows. They don't choose which folders Claude can read.

That leaves a gap for a common request: a company wants Claude to read one team's or one client's folders and nothing else, controlled in one place. With a drive connector, the boundary is each person's whole account. This guide covers what each connector reaches, what admins can control, and how to give the assistant only the folders it needs.

## Which Drive Connectors Do Claude and ChatGPT Offer?

Both assistants connect to all four major drives. By default, each one signs in as the person using it:

| Drive | Claude | ChatGPT |
| --- | --- | --- |
| Google Drive | Google Drive connector. Each person signs in with their own Google account, so Claude reaches only the files that account can open. | Google Drive app. It connects to files and folders the Google account can already access. |
| OneDrive | Microsoft 365 connector, using delegated permissions. It needs a Microsoft 365 account in a Microsoft Entra tenant; personal Microsoft accounts can't be used. | OpenAI documents OneDrive for work or school access through a Microsoft app that a Microsoft Entra administrator may need to approve. OpenAI says that app doesn't support personal OneDrive accounts. |
| Dropbox | Dropbox connector. Dropbox says Claude can only access content you already have permission to use. | Dropbox plugin. Dropbox says you can only access files you already have permission to use. |
| Box | Box connector at Box's hosted MCP server. Its listing in Claude says it enforces existing Box security and access policies. | Box app. ChatGPT can work only with content available through your authorized Box connection. |

OpenAI's terms differ from Anthropic's. ChatGPT calls a connection to an outside service an app, and a plugin packages one or more apps or skills for installation. In this guide, ChatGPT connectors means these apps.

For setup errors and permission prompts on a specific drive, see the guides for [Claude and Google Drive](/resources/claude-google-drive-permissions/), [Claude and OneDrive](/resources/claude-onedrive-permissions/), [Claude and Dropbox](/resources/claude-dropbox-permissions/), [Claude and Box](/resources/claude-box-permissions/), [ChatGPT and Google Drive](/resources/chatgpt-google-drive-permissions/), [ChatGPT and OneDrive](/resources/chatgpt-onedrive-connector/), [ChatGPT and Dropbox](/resources/chatgpt-dropbox-connector/) and [ChatGPT and Box](/resources/chatgpt-box-connector/).

## Do Connectors Copy Your Files or Fetch Them When You Ask?

The drive connectors in both assistants fetch files when a request needs them. Neither vendor describes copying a whole drive ahead of time.

### Claude

- Anthropic's Google Workspace article says Claude only accesses your data when you ask a question or request an action that needs it, and retrieves the minimum information needed.
- Data retrieved while using connectors is stored on Anthropic's servers and kept with its chat, so deleting the chat deletes that data.
- The Microsoft 365 connector retrieves data on demand during active queries and doesn't cache file content.
- A Drive file you add to a chat is read again from Drive each time you send a message, so later edits reach Claude.
- Anthropic says it doesn't train its models on Gmail, Drive or Calendar connector data. In consumer accounts that allow training, content you paste from them, or Claude's responses that include information from them, may be used.

### ChatGPT

- OpenAI says administrator-managed and individually authorized app sync are no longer available, and members connect Google Drive for live access to supported files and actions.
- OpenAI says the Box app doesn't use individual sync.
- Box lists both its Claude and ChatGPT integrations as Box MCP server integrations, where files stay inside Box unless a query returns them.
- Dropbox says ChatGPT retrieves Dropbox data only when you ask it to act on that data, and that data in a conversation stays stored until you delete the conversation.
- With Memory on, OpenAI says ChatGPT may remember relevant information it accessed from an app.

So the boundary is the live account, not a copy of it.

## What Can Claude Team and Enterprise Admins Control?

Anthropic documents these controls for Team and Enterprise plans:

- **Enable each connector.** On Team and Enterprise plans, an Owner or Primary Owner must enable a connector before members can use it. Enabling it grants no access by itself; each person still signs in with their own account.
- **Handle requests.** Members can request a connector. Requests are on by default on Team plans and off by default on Enterprise, and owners can approve, decline, or decline and block.
- **Set tool permissions.** Owners set each tool category or individual tool to Always allow, Needs approval or Blocked, organization-wide, and members can't override it.
- **Keep work accounts in the organization.** On Enterprise plans, owners can stop services on their verified domains from being connected to Claude accounts outside the organization.
- **Limit sharing.** On Team and Enterprise plans, connectors work only in private projects, and chats with synced content can't be shared.

Each drive adds its own gate. For the Microsoft 365 connector, a Microsoft Entra Global Administrator grants a one-time consent for the tenant, and setting Assignment required on both Claude enterprise applications limits who can connect. Revoking the `Files.Read` or `Files.Read.All` permission in Entra blocks reading files from OneDrive, and Anthropic says the connector's Microsoft Graph calls appear in the organization's Microsoft 365 audit log. For Google Drive, a Google Workspace admin may need to mark Claude as Trusted under API controls. Claude admins can allow or block the Dropbox connector, and Box admins set each MCP integration's state under Integrations in the Box Admin Console.

Connectors added in claude.ai also appear in Claude Code for people signed in with a claude.ai account, and Claude Code applies the organization's per-tool settings.

None of these controls selects folders. They decide who connects and what Claude may do, and what it can read is still each person's account.

## What Data Can ChatGPT Access Through Connectors?

ChatGPT can access what the connected account can already open, the same as Claude. OpenAI's Google Drive article says Google permissions determine what the connected account can access, and that ChatGPT can't use files that account can't open.

ChatGPT workspace admins work with three separate controls:

- **App access.** In ChatGPT Business, apps are enabled by default and admins change workspace-wide availability. New Enterprise and Edu workspaces start with a selected set of apps, and admins can choose which roles use each app.
- **Actions.** Admins enable the read or write actions an app may take, and choose whether actions added later are enabled, limited to read actions or disabled.
- **Permissions.** These set when ChatGPT asks before using an app, from Always ask to Allow read actions and beyond. OpenAI says app permissions don't grant new access; they only change when ChatGPT asks.

Providers add their own approval. A Google Workspace administrator decides whether the ChatGPT app is trusted for the OAuth scopes its actions need, and for OneDrive for work or school a Microsoft Entra administrator grants the Microsoft permissions. Enterprise organizations can also ask OpenAI to block work accounts on their verified domain from connecting to supported apps, including Google Drive, Dropbox and Box, from workspaces outside the organization.

### Google Drive: whole shared drives only

ChatGPT has one content control for drives. In Enterprise workspaces where the controls are enabled, owners and admins can allow or block selected shared drives by ID and turn My Drive access on or off. A file must also be open to the connected user's Google account.

OpenAI states the limit: these controls apply to whole shared drives and don't provide folder, individual-file, user, group or Google Drive label exclusions. Changing them also doesn't erase content already retrieved into conversations or saved memories.

If you're building on OpenAI models rather than ChatGPT, see [storage for OpenAI](/storage-for-openai/).

## Can You Limit a Claude or ChatGPT Connector to One Folder?

Not with the built-in drive connectors. The narrowest documented scopes:

| Route | What decides what the assistant reads | Narrowest documented scope |
| --- | --- | --- |
| Claude Google Drive connector | The person's Google account | The whole account. A person can add specific Docs, Sheets or Slides to a chat or private project by hand. |
| Claude Microsoft 365 connector (OneDrive) | The person's work or school account | The whole account. Admins can block OneDrive file reads entirely in Entra. |
| Claude Dropbox and Box connectors | The person's Dropbox or Box account | The whole account |
| ChatGPT Google Drive app (Enterprise controls) | The person's Google account and the workspace's drive policy | Whole shared drives, with My Drive on or off |
| ChatGPT apps for OneDrive for work or school, Dropbox and Box | The person's account | The whole account |
| A Box identity invited only to chosen folders | That Box identity's collaborations | The folders it is collaborated on |
| A scoped Fastio workspace | The workspaces chosen at sign-in | The folders synced into that workspace |

Box's guidance for agents is to choose the Box user or service account deliberately and collaborate it onto only the folders the agent should access. Because the agent acts as the Box user who signs in, this means connecting with a separate Box identity.

Dropbox says apps request their own level of access: Select Access for a specific file, App Folder for one folder, or Full Dropbox for all folders and files. You can see which level a connected app has under Settings, Apps.

## What Can Google, Microsoft, Dropbox and Box Admins Control?

Each storage provider lets its admins decide which outside apps may connect. These controls work on the app, not on a set of folders, with one exception in Box.

- **Google Workspace.** In the Admin console under Security, Access and data control, API controls, admins mark each app as Trusted, Limited, Specific Google data or Blocked. Setting Drive to Restricted limits Drive data to apps marked Trusted or Specific Google data, and admins can also restrict high-risk Drive scopes, such as deleting files.
- **Microsoft Entra ID.** Admins set whether users can consent to apps themselves. An app set to require user assignment needs administrator consent, and only the users and groups assigned to it get access.
- **Dropbox.** Team admins can block all registered apps or specific ones from the Integrations tab of the admin console. Blocking an app doesn't disconnect members who already connected it.
- **Box.** Admins turn each MCP integration on or off under Integrations in the Admin Console and can give a single AI platform its own set of allowed Box MCP tools. Box Shield adds a classification-based Read restriction that blocks integrations from previewing, viewing, searching or reading the text of restricted files. It is off by default.

Box Shield's rule is the one content control here, and it works by classification label, not by folder.

## How to Give Claude or ChatGPT Only Selected Folders With Fastio

A scoped workspace limits Claude or ChatGPT by giving it a copy of only the folders it may read. With Fastio, the drive stays where it is, and each scope becomes its own [workspace](/product/workspaces/).

1. **Create a workspace for the assistant,** or one per scope, such as one per team or client. Access in Fastio is set per organization, workspace and share, with no folder- or file-level permissions inside a workspace, so the workspace is the boundary.
2. **Connect the drive with [Cloud Sync](/product/cloud-sync/).** A member connects their own Google Drive, Dropbox, Box or OneDrive for work or school account, picks a folder in the drive, and chooses where it lands in the workspace. Each synced folder uses one Cloud Sync source, and plans include different numbers of sources (see [pricing](/pricing/)).
3. **Keep folders read-only unless you need two-way.** Each folder syncs read-only unless set to two-way. A read-only folder never writes back to the drive; on a two-way folder, changes made in Fastio go back. Syncs run on a schedule and on demand, and new and changed files come across at each sync.
4. **Turn on Deep Indexing** for the workspace if the assistant should search inside files rather than by file name.
5. **Connect the assistant.**
   - **Claude:** open Customize, then Connectors, and add a custom connector at `https://mcp.fast.io/mcp/tools`. On Team and Enterprise plans, an owner adds it for the organization first.
   - **ChatGPT:** find Fastio under Plugins in the ChatGPT sidebar, select Install plugin, then Connect. If Fastio isn't listed or your workspace doesn't allow directory plugins, add it as a custom MCP server at `https://mcp.fast.io/mcp/operations`; depending on your ChatGPT version, this can require Developer mode. OpenAI offers custom MCP servers on the web to Business, Enterprise and Edu workspaces (in Business, only admins and owners add them) and to Pro users with read and fetch permissions.
   - **Claude Code and other coding agents:** use `https://mcp.fast.io/mcp/code`, for example `claude mcp add --transport http fast-io https://mcp.fast.io/mcp/code`, then run `/mcp` to sign in.
6. **Sign in with Read Only.** Each person signs in with OAuth in the browser, chooses Read Only, and selects only the workspaces this connection may reach. With Read Only, tools that change data are not offered. Read & Write is also available if the assistant should save files.
7. **Give headless agents a scoped API key.** Code with no person present sends `Authorization: Bearer your-api-key`, and the key can be scoped to specific organizations, workspaces or shares.

With Read Only access, the assistant can browse the synced folders and read a file's text, search the workspace by keyword or by meaning with short excerpts, and quote the passage an answer rests on. Steps for every client are on [mcp.fast.io/docs](https://mcp.fast.io/docs).

### How the sync account works

Connections are per person. Fastio syncs with that person's account, so it sees only what that account can open, and it changes no permissions in the drive. When that member leaves, their folders stop syncing and the files already synced stay in the workspace. Another member can connect their own account and set the folders up again.

### Close the other route

A scoped workspace limits the assistant only if it's the only route. If the same people keep Claude's or ChatGPT's own drive connector, the assistant can still reach their whole account, so turn that connector off or limit it by role with the admin controls above.

To revoke a Fastio connection, remove the connector in the AI client, then in Fastio open Settings, Devices & Agents, Connected Devices and select Revoke.

## What Fastio's Governance Covers, and What It Costs

Fastio governs access by organization, workspace and share. Workspace membership decides who can open the synced copy, and a share gives an outside party a subset of files without workspace membership.

Fastio's activity log records changes: uploads, edits, moves, deletions, and permission and membership changes. It doesn't record views, opens or downloads, so don't plan on it as a record of what the assistant read.

The Enterprise plan adds administrative policies, legal holds, security alerts and a SIEM audit stream. Among those policies, an Enterprise organization can deny requests made through the Fastio MCP server, set separately for admins and members, with per-person overrides.

AI work uses credits. Each plan includes a monthly credit allowance, and usage beyond it is metered. Monthly plans include a 14-day trial, and a card is required. See [pricing](/pricing/) for plans and the number of Cloud Sync sources each includes.

## Setup Checklist

1. **List the scopes.** For each use case, write down who uses the assistant and which drive folders it may read.
2. **Create one workspace per scope** and add only the people in that scope.
3. **Connect Cloud Sync** from a member account that can open those folders, pick the folders, and leave them read-only unless Fastio should write back.
4. **Turn on Deep Indexing** if the assistant should search inside files.
5. **Connect Claude, ChatGPT or a coding agent** with its Fastio address, choose Read Only, and select only that scope's workspaces. Give headless agents a scoped API key.
6. **Turn off or restrict the native drive connector** for these people, using Claude's organization connector settings or ChatGPT's app and role controls.
7. **Test with a real account.** Ask for a document inside the scope and one outside it, and confirm the assistant finds only the first.
8. **Review when a team or client changes,** and revoke connections under Settings, Devices & Agents, Connected Devices when someone leaves.

## Frequently asked questions

### What connectors can you add to Claude?

Anthropic's Connectors Directory lists connectors by category, each with a page on its use cases, read and write capabilities and availability. Drive connectors include Google Drive, Microsoft 365 for OneDrive, Dropbox and Box. You can also add a custom connector for any remote MCP server by its URL, such as https://mcp.fast.io/mcp/tools for Fastio.

### What is the benefit of connectors in Claude?

Anthropic says connectors let Claude access your apps and services, retrieve your data and take actions in them, so you can ask about files or update records without leaving the conversation. Connectors work across Claude, Claude Desktop, Claude Code and the API through the MCP connector.

### What is the difference between an API and a connector?

An API is the set of calls a service offers to programs. A connector wraps some of those calls as tools an assistant can choose during a conversation, usually over MCP. Box describes its MCP server as exposing existing Box API functionality as a defined set of tools, not new capabilities. In both cases, the signed-in account sets what it can reach.

### How do I connect connectors in Claude Code?

If you sign in to Claude Code with a claude.ai account, connectors added in claude.ai appear automatically, and /mcp lists them. To add a remote MCP server directly, run claude mcp add --transport http with a name and URL, for example claude mcp add --transport http fast-io https://mcp.fast.io/mcp/code, then run /mcp to sign in.

### How do I connect Claude to Google Drive?

In claude.ai, open Customize, then Connectors, find Google Drive, select Connect and sign in to your Google account. On Team and Enterprise plans, an Owner adds Google Drive for the organization first. If Google blocks the sign-in, a Google Workspace admin may need to mark Claude as Trusted under API controls.

### Can ChatGPT's Google Drive connector be limited to one folder?

Not to a folder. In Enterprise workspaces where the controls are enabled, owners and admins can allow or block whole shared drives and turn My Drive access on or off. OpenAI says these controls don't provide folder, individual-file, user, group or Google Drive label exclusions.

### Does Claude keep the files it reads through a connector?

Anthropic says Claude reads connector data only when a request needs it. Data retrieved while using connectors is stored with its chat, so deleting the chat deletes it. The Microsoft 365 connector retrieves data during active queries and doesn't cache file content.

### Does a read-only Fastio sync change anything in my drive?

No. A read-only folder never writes back to the drive, and Fastio changes no permissions there. Syncs run on a schedule and on demand, and new and changed files come across at each sync. Set a folder to two-way only if changes made in Fastio should go back to the drive.

## Sources

- [Claude Help Center: Use connectors to extend Claude's capabilities](https://support.claude.com/en/articles/11176164-use-connectors-to-extend-claude-s-capabilities): Claude inherits each person's permissions from the connected service, and a custom connector with a shared credential reaches whatever that credential can access.
- [Claude Help Center: Use connectors to extend Claude's capabilities](https://support.claude.com/en/articles/11176164-use-connectors-to-extend-claude-s-capabilities): On Team and Enterprise plans an Owner or Primary Owner enables each connector, members authenticate individually, connector requests default on for Team and off for Enterprise, owners set tool permissions to Always allow, Needs approval or Blocked, Enterprise owners can restrict verified-domain connectors, and connectors work only in private projects.
- [Claude Help Center: Use Google Workspace connectors](https://support.claude.com/en/articles/10166901-use-google-workspace-connectors): Claude accesses Google Workspace data only when a request needs it, retrieves the minimum needed, mirrors existing permissions, stores retrieved data with its chat, does not train on Drive connector data, and may need to be marked Trusted under Google API controls.
- [Claude Docs: Google Drive connector](https://claude.com/docs/connectors/google/drive): Each person signs in to the Google Drive connector with their own Google account, Drive files added to a chat are read from Drive on each message, and Drive files can be added only to private projects.
- [Claude Help Center: Microsoft 365 connector security guide](https://support.claude.com/en/articles/12684923-microsoft-365-connector-security-guide): The Microsoft 365 connector uses delegated permissions, retrieves data on demand without caching file content, requires a Microsoft Entra tenant account, blocks OneDrive reads when Files.Read or Files.Read.All is revoked, and logs its Graph calls in the Microsoft 365 audit log.
- [Claude Help Center: Set up the Microsoft 365 connector](https://support.claude.com/en/articles/12542951-set-up-the-microsoft-365-connector): A Microsoft Entra Global Administrator grants one-time consent for the Microsoft 365 connector, and Assignment required on both Claude enterprise applications limits who can connect.
- [Claude Code Docs: Connect Claude Code to tools via MCP](https://code.claude.com/docs/en/mcp): Connectors added in claude.ai are available in Claude Code with a claude.ai login, only admins add them on Team and Enterprise plans, organization tool controls apply, and remote servers are added with claude mcp add --transport http.
- [Claude: Dropbox connector](https://claude.com/marketplace/connectors/dropbox): The Dropbox connector for Claude respects existing Dropbox permissions, and Claude only works with files you already have access to.
- [Dropbox Help: How to connect Dropbox to Claude](https://help.dropbox.com/integrations/connect-dropbox-to-claude): Claude can only access Dropbox content you already have permission to use, and Claude admins can allow or block the Dropbox connector and plugin.
- [Claude: Box connector](https://claude.com/marketplace/connectors/box): The Box connector for Claude uses Box's hosted MCP server and enforces existing Box security and access policies.
- [OpenAI Help Center: Google Drive app and setup in ChatGPT](https://help.openai.com/en/articles/10929079-google-drive-app-and-setup-in-chatgpt): The ChatGPT Google Drive app connects to files and folders the Google account can already access, ChatGPT cannot use files that account cannot open, and ChatGPT and Google Workspace administrators control actions and OAuth scopes separately.
- [OpenAI Help Center: Managing Google Drive access in ChatGPT](https://help.openai.com/en/articles/20001608-managing-google-drive-access-in-chatgpt): Enterprise owners and admins can allow or block whole shared drives and control My Drive access, the controls provide no folder, file, user, group or label exclusions, and changes do not erase content already retrieved.
- [OpenAI Help Center: Admin controls, security, and compliance for plugins and apps](https://help.openai.com/en/articles/11509118-admin-controls-security-and-compliance-for-plugins-and-apps): ChatGPT app sync is no longer available and Google Drive uses live access; Business apps are enabled by default; Enterprise and Edu admins can use role-based access; admins control actions and permissions; Enterprise can restrict verified-domain connections for supported apps.
- [OpenAI Help Center: Connected apps in ChatGPT](https://help.openai.com/en/articles/11487775-connected-apps-in-chatgpt): An app connects ChatGPT to an external service and a plugin packages apps or skills; app permissions do not grant new access; ChatGPT may remember information accessed from apps when Memory is on.
- [OpenAI Help Center: Box app and setup in ChatGPT](https://help.openai.com/en/articles/12368225-box-app-and-setup-in-chatgpt): The ChatGPT Box app works only with content available through the authorized Box connection and does not use individual sync.
- [OpenAI Help Center, article 12143177](https://help.openai.com/en/articles/12143177): OpenAI's Microsoft app reaches supported OneDrive for work or school content the account can access, personal OneDrive accounts are not supported, and a Microsoft Entra administrator may need to approve its permissions.
- [OpenAI Help Center: Connecting custom MCP servers in ChatGPT](https://help.openai.com/en/articles/12584461-connecting-custom-mcp-servers-in-chatgpt): Custom MCP server connections are available to ChatGPT Business, Enterprise and Edu on the web, and in Business only admins and owners create and publish them.
- [Dropbox Help: How to connect Dropbox to ChatGPT](https://help.dropbox.com/integrations/chatGPT-app): The Dropbox plugin for ChatGPT only accesses files you already have permission to use, retrieves data when you ask, and keeps conversation data until the conversation is deleted.
- [Box Support: Connecting to Box from Third Party AI Apps](https://support.box.com/hc/en-us/articles/48273464323987-Connecting-to-Box-from-Third-Party-AI-Apps): Box lists Claude and the ChatGPT plugin as Box MCP server integrations, where files stay inside Box unless returned in a query and users reach only content they can access.
- [Box Support: Managing Box MCP Servers](https://support.box.com/hc/en-us/articles/43847256139923-Managing-Box-MCP-Servers): The Box MCP server exposes existing Box API functionality as a defined set of tools, and admins enable predefined MCP servers under Integrations in the Admin Console.
- [Box Support: New Box MCP server admin controls for published integrations](https://support.box.com/hc/en-us/articles/53519730376979-New-Box-MCP-server-admin-controls-for-published-integrations): Box admins can set a custom set of allowed Box MCP tools for each published AI integration.
- [Box Support: Classification-based access policy for AI agents in Box Shield](https://support.box.com/hc/en-us/articles/53532421634707-Announcing-Classification-based-access-policy-for-AI-agents-in-Box-Shield): Box Shield's Read restriction blocks integrations from previewing, viewing, searching or reading the text of restricted files and is off by default.
- [Box Developer Docs: Give an AI agent permission-aware access to enterprise documents](https://developer.box.com/guides/box-mcp/permission-aware-access): With end-user OAuth the agent acts as the Box user who signs in, and Box advises collaborating the chosen identity onto the folders the agent should access.
- [Google Workspace Admin Help: Control which apps access Google Workspace data](https://knowledge.workspace.google.com/admin/apps/control-which-apps-access-google-workspace-data): Google Workspace admins set apps to Trusted, Limited, Specific Google data or Blocked in API controls, can restrict Drive to trusted apps, and can restrict high-risk Drive scopes.
- [Microsoft Learn: Configure how users consent to applications](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-user-consent): Microsoft Entra admins configure whether users can consent to applications, and apps that require user assignment need administrator consent.
- [Microsoft Learn: Assign users and groups to an application](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal): When a group is assigned to an application that requires assignment, only users in the group have access.
- [Dropbox Help: How to manage apps for your Dropbox team](https://help.dropbox.com/integrations/app-integrations): Dropbox team admins can block all registered apps or specific apps, and blocking does not disconnect members already connected.
- [Dropbox Help: How to manage third-party apps on Dropbox](https://help.dropbox.com/integrations/third-party-apps): Dropbox shows each app's access level as Select Access, App Folder or Full Dropbox.
- [Fastio MCP server documentation](https://mcp.fast.io/docs): Fastio's MCP addresses are /mcp/tools for Claude, /mcp/operations for ChatGPT and /mcp/code for coding agents; sign-in offers Read Only or Read & Write and chosen workspaces; revocation is under Settings, Devices & Agents, Connected Devices; content search needs Deep Indexing.
- [Fastio API documentation](https://api.fast.io/current/llms/full/): Fastio's Enterprise MCP access policy can deny requests made through the Fastio MCP server for admins and members separately, with per-person overrides.

## About Fast.io

Fast.io provides shared workspaces where people and AI agents work on the same files, with built-in semantic search and citation-backed chat over what they hold. Agents reach it through a remote MCP server, a REST API at https://api.fast.io/current/, and a command line client published on npm as @vividengine/fastio-cli. MCP setup is at https://mcp.fast.io/docs: Claude and most MCP clients connect to https://mcp.fast.io/mcp/tools, ChatGPT to https://mcp.fast.io/mcp/operations, and coding agents to https://mcp.fast.io/mcp/code.
