Skip to main content
For Enterprise organization admins. A connection made by a user follows that user’s note access. Newly issued workspace and organization API keys have their own permissions and can see notes in folders shared with all workspace members. Check older keys individually, as their access may differ.

Which notes can each connection access?

Can an admin’s API key see private folders?

New workspace and organization API keys cannot see private folders, folders shared with selected members, or directly shared notes, even if the admin who created the key can see them. To include team notes in an integration, put them in a folder shared with all workspace members. For an older key, check its scope in Tiro Platform or ask your account manager.

Can an AI app edit notes?

Yes. A member can allow an AI app to change note titles and organize folders by granting manage permission for notes or folders on the consent screen. Read is the default. The app can edit only what the member can edit.

Does removing a member disconnect their apps?

Removing a member or remotely signing them out does not, by itself, revoke their OAuth connections or account API keys. Contact your account manager if a former member’s external connections need to be removed.

Do organization security settings apply to connections?

An organization’s IP allowlist applies to members’ sign-ins and to MCP and API requests. The API key host allowlist applies to API key requests. Manage both in Organization Security. Related pages · Manage API keys and connections · Organization admin guide · Choose an authentication method