Authorize an application

When you connect an AI assistant or another application to Nuvelics, it sends your browser to a consent screen that asks you to approve it. You choose which organization it may work in, you see what it is asking for, and you allow or refuse. This page covers that screen. Setting up an assistant, and what it can do once connected, is in Agents.

Who reaches itCopy Anchor Link

Anyone with an account, but only by way of an application that asks. You do not open this page yourself: the application sends you here with its request. If you are signed out, you are sent to Sign in first and returned to the same request.

Approve an applicationCopy Anchor Link

1. In your assistant or application, start the connection. Your browser opens the screen titled Authorize followed by the application's name, which says it "is requesting access to your Nuvelics account".
2. Read what it asks for. A list names each permission in plain words, such as View stories or Edit stories.
3. Check Organization. If only one organization can be offered, it is shown by name, with its short name in brackets. If several can, choose one from the picker.
4. Choose Allow to approve, or Deny to refuse.

On Allow your browser returns to the application, which finishes connecting by itself.

Check an unverified applicationCopy Anchor Link

An application that registered itself, with no operator involved, shows an Unverified badge. The screen then says its name is one the application supplied itself and that Nuvelics has not verified it, and shows Access will be delivered to and the host the approval is sent to. The name is whatever the application chose, but the host is the part that is hard to fake, so check that it is the one you expect. When the application supplied them, Website, Terms of service and Privacy policy links appear for you to read first.

What you are grantingCopy Anchor Link

An approval connects the application to the one organization you chose. From then on it acts as you, in that organization, limited to the permissions the screen listed and to what you yourself are allowed to do. It is never your whole account, and it never reaches another organization. If your role changes, its access narrows to match on its next request, and if you leave the organization it is disconnected.

To use the same application in a second organization you approve it again and pick that organization: a second consent is its own decision.

When you belong to only one organization, reconnecting an application you already approved skips this screen, provided it asks for nothing new. With more than one organization you always see it.

What happens if you denyCopy Anchor Link

Deny grants nothing. Your browser returns to the application with the request refused, and it is up to the application to say so.

Withdraw an approval laterCopy Anchor Link

You can disconnect an application at any time from Connected apps in User Settings. Owners can also cut one off for everyone from Connected apps in Settings.

When something goes wrongCopy Anchor Link

• Can't complete this request, "This authorization request is invalid or has expired. Go back to the application and try again.": the request is malformed or out of date, or the application is not one Nuvelics recognizes. Start the connection again from the application.
• "You must belong to an organization to authorize this application.": your account has no organization yet. Accept an invitation first, as described in Accept an invitation.
• "MCP access is turned off. An owner or admin can turn it on under MCP in the organization settings.": none of your organizations can receive the connection, because MCP is switched off in all of them. Ask an owner or admin to turn it on, as described in MCP. An organization with MCP off is not offered in the picker.
• An owner or admin can also block self-registered applications, and a request from one is then refused. See MCP.