> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tiro.ooo/llms.txt
> Use this file to discover all available pages before exploring further.

# What data can connected apps see?

> See which Tiro notes AI apps and internal systems can access, based on the connection method and credential.

엔터프라이즈 For Enterprise organization admins.

A connection made by a user follows that user's note access. Newly issued workspace and organization API keys have their own permissions and can see notes in folders shared with all workspace members. Check older keys individually, as their access may differ.

## Which notes can each connection access?

| Connection | Who sets it up | Notes it can access |
| - | - | - |
| A Tiro account connected to an AI app such as Claude or ChatGPT | The member | Notes the member can access, within the permissions they grant |
| Account API key | The member | Notes the member can access, within any workspaces selected for the key |
| Internal app using OAuth | The organization registers the app. Each member consents | Notes the consenting member can access |
| Workspace API key | A workspace admin | Notes in folders shared with everyone in that workspace |
| Organization API key | An organization Admin or Developer | Notes in folders shared with all members of each selected workspace, or of all workspaces if no selection was set |

## Can an admin's API key see private folders?

New workspace and organization API keys cannot see private folders, folders shared with selected members, or directly shared notes, even if the admin who created the key can see them. To include team notes in an integration, put them in a folder shared with all workspace members. For an older key, check its scope in Tiro Platform or ask your account manager.

## Can an AI app edit notes?

Yes. A member can allow an AI app to change note titles and organize folders by granting manage permission for notes or folders on the consent screen. Read is the default. The app can edit only what the member can edit.

## Does removing a member disconnect their apps?

Removing a member or remotely signing them out does not, by itself, revoke their OAuth connections or account API keys. Contact your account manager if a former member's external connections need to be removed.

## Do organization security settings apply to connections?

An organization's IP allowlist applies to members' sign-ins and to MCP and API requests. The API key host allowlist applies to API key requests. Manage both in [Organization Security](https://docs.tiro.ooo/en/guide/privacy/enterprise-security.md).

**Related pages** · [Manage API keys and connections](https://docs.tiro.ooo/en/enterprise/keys-and-connections.md) · [Organization admin guide](https://docs.tiro.ooo/en/enterprise/org-admin.md) · [Choose an authentication method](https://docs.tiro.ooo/en/developers/fundamentals/choose-auth.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.