# Security and data

What a connected app can reach, what Soontra records, and how to shut access off.

## What leaves the workspace

A connected AI app receives whatever the tools it calls return: names, text, transcripts, figures and, with `download`, links to files. That content is then handled under the AI app’s own terms. Grant the narrowest [scopes](https://soontra.com/docs/scopes) that do the job.

- File content is returned only for files whose AI indexing is turned on.
- Teammates’ names appear only with the `directory` scope. Without it, comments and notifications come back without their authors.
- A connected app cannot publish, schedule or delete, whatever it is asked to do.

## Text in results is data, not instructions

File names, descriptions, comments, documents and transcripts are written by people, and a result can contain text that reads like an instruction to the model. Every tool result carries a `_notice` field saying that workspace text is untrusted data. If you build an agent on this endpoint, keep that boundary: never let text returned by a tool decide what the agent does next without a person in the loop for anything that matters.

## What Soontra records

- Every request is written to an activity log: which credential, which tool, when, and whether it worked.
- Arguments are recorded as the names of the fields and the length of each value, never the values themselves.
- Entries are kept for 90 days.
- Owners and admins can see recent tool calls under **Settings**, **API & MCP**.

## Checks on writes

Text written through the endpoint is checked by moderation before it is saved. If the check cannot run, the write is refused rather than let through.

## Shutting access off

- **A signed-in app:** disconnect it under **Settings**, **API & MCP**. It stops at its next request.
- **An API key:** revoke it there. Revoking is immediate and permanent.
- **Everything:** the workspace owner can revoke all keys and disconnect all apps at once.
- **A person leaving:** removing someone from the workspace, or changing their role to member, stops every connection and key they created.

## The endpoint

- All traffic is HTTPS to `https://app.soontra.com/api/mcp`.
- API keys are stored as hashes. Soontra cannot show a key again after it is created.
- A key can be limited to up to 20 IP addresses or CIDR blocks.