Connections
A connection is what an AI assistant holds after you paste the Waafir URL into it and sign in (see Setup). It carries exactly what you approved on the consent screen: one organization, the data rooms you picked, and read, write or admin access, never more than your own role allows. You never see or copy a secret: the assistant keeps it, and renews it on its own while you use it.
Your connected assistants
Add-ons → Config → AI assistants lists every assistant connected to your account in the current organization, with:
- its name: the web address it proved it controls, such as
claude.ai, orUnverified app "<name>"for one that registered itself; - what it can do (its scope), and whether it may sign documents or send outside your organization;
- which data rooms it can reach, and how many of them no longer exist;
- when it was connected, when it was last used, and the date it disconnects if it goes unused.
Revoking a connection
Choose Revoke on the row and confirm. The assistant loses access at once: its next request is refused, and it cannot renew its access. To reconnect, add the URL to the assistant and sign in again; that makes a new connection.
How long a connection lasts
- It disconnects if unused for 30 days. Each time the assistant renews its access, the 30 days start again. A lapsed connection shows Lapsed in the list: sign in again from your assistant.
- It ends on its end date, if it has one.
- It ends when you revoke it, or when an owner or admin does.
How many you can have
You can have up to 20 connections per user per organization, counting connections used or created in the last 30 days. A connection that has gone unused for 30 days stops counting. At the limit, revoke one you no longer use before connecting another.
Owners and admins
Organization owners and admins also see every member's connections, under Connections in this organization on the same page, and can revoke them. An admin cannot revoke an owner's connection; only an owner can. Members see only their own.
When someone leaves your organization or is removed from it, or their account or the organization is deleted, their connections are revoked at the same moment, and each appears in the activity log as App disconnected.
In the activity log
Every connection is recorded in the activity log: App connected when it is made, App connection renewed when you sign in to it again, App connection permissions changed when its access changes, and App disconnected when it is revoked, whether by its owner, by an owner or admin, or by the assistant itself.
Setup
Connect Claude, ChatGPT, Claude Code, Cursor, VS Code, Gemini CLI or Codex to Waafir by pasting one URL and signing in. Covers the consent screen, each client's add-server step, connecting with a token instead, and the connection errors you may hit.
waafir-redact reference
Reference for the waafir-redact MCP server — redact PII from a block of text with redact_text, or analyze a whole document for PII with redact_file and redact_file_status.