---
title: "Security & Revocation"
description: "Security & Revocation"
---

- **Strict Multi-Tenancy**: Each MCP connection grants access to exactly one organization, chosen at approval and immutable for that connection. To access another workspace, authorize an additional connection.
- **Active State Validation**: The connection, the user's current membership and role, and the organization's access policy are checked on every MCP request and authenticated transfer. Membership removal, connection revocation or expiry rejects the next request.
- **Deadline and Browser Session**: Each approval expires after 30 days without an MCP call, and each call renews that window. Refreshing tokens without calls does not extend it, and browser logout or browser-session expiry does not revoke the connection. Revocation and losing membership in the organization end the connection at any time.
- **Connection-Specific Revocation**: Use Disconnect on the console Home (`/en-US/app`). Revocation invalidates only that connection and its access and refresh tokens, including rotated refresh tokens. Other approvals stay independent, even for the same client and organization; the browser session also stays active.