What a connected app can do
The app acts with your role. A viewer can search and read but not create or update. Your role is checked on every call, so a role change or leaving the workspace takes effect immediately.
Connect an app
- Claude
- ChatGPT
- Claude Code
- Codex
- In Claude, open Customize → Connectors, choose + Add, then Add custom connector.
- Name it Cogno, paste the URL from Settings → MCP and choose Continue.
- Choose Connect, then approve on the Cogno page.
Approve the connection
The Cogno page shows the app’s name, what it may do, and where your answer is sent. Choose the workspace and Allow. If the answer goes tolocalhost or 127.0.0.1, it is a program on your computer, such as Claude Code or Codex: allow it only if you started the connection yourself. If the page says the app’s name is not verified, the app named itself: allow it only if the destination shown is the app you meant to connect.
Disconnect
In Settings → MCP, choose Disconnect next to the app. Its access ends immediately. Each approval is its own connection, so the same app on two computers shows twice and each one disconnects on its own. If you are removed from a workspace, your connections there stop working and do not come back if you are added again.How it works
The server is at/mcp/user on the Cogno API and follows the MCP authorization spec: OAuth 2.1 with PKCE, Protected Resource Metadata, dynamic client registration and Client ID Metadata Documents. Access tokens last one hour; refresh tokens rotate on every use. A refresh token used again within a minute (an app retrying) gets new tokens; used again later, it ends the connection.