Connectors

A connector identifies the owning tenant, external system, permitted operations, credential reference, and revocation path.

Least privilege#

Start read-only. Add write scopes only when a validated workflow requires an external side effect and has a clear confirmation and recovery model.