Quick answer
Go to Settings → Connected assistants. Each entry names the AI assistant, the workspace it reaches and the permissions you allowed. Choose Disconnect to end its access immediately. What an assistant can see is exactly the permissions you granted on the consent screen; disconnecting revokes every token it holds.
What does an assistant get when I connect it?
When you connect Claude, ChatGPT or another assistant, it sends you to an ASHR.work consent screen. That screen names the assistant, asks which workspace it may reach, and lists the permission groups it is requesting, each marked read only or can change. Allowing grants exactly that list, in that one workspace. Denying grants nothing.
Some permissions are never available to a connected assistant, whatever it asks for: running payroll, grievances and data-subject requests, platform administration and stored credentials.
How do I disconnect one?
Open the list
Go to Settings → Security and choose Manage connected assistants.Find the assistant
Each card shows the assistant, the workspace, the permission groups, when it was connected and when it was last active.Disconnect
Choose Disconnect. Every token the assistant holds is revoked immediately and its next request is refused.
The assistant can only get back in by sending you through the consent screen again.
What does an HR admin see?
An HR admin sees a second list: every assistant connected to the workspace, with the name of the person who connected it. They can disconnect any of them. Each disconnect is recorded in the organisation's audit log with who did it.
Connecting from a terminal or a desktop app
Claude Code, Claude Desktop and similar tools connect to the same endpoint (https://www.ashr.work/api/mcp) and send you through the same consent screen. A connection made from a terminal appears in this list like any other and is disconnected the same way. The step-by-step for each tool is in Connect an AI assistant.
Frequently asked questions
- What can a connected assistant see?
- Exactly the permission groups you allowed on the consent screen, in the one workspace you picked — nothing more. It can never run payroll, read grievances or data-subject requests, or reach platform administration.
- Does disconnecting take effect straight away?
- Yes. Every token the assistant holds is revoked at the moment you disconnect, and its next request is refused.
- Can my HR admin see what I connected?
- An HR admin sees every assistant connected to the workspace, including who connected it, and can disconnect any of them. They cannot see your conversations with the assistant.
- I do not recognise an assistant in the list — what should I do?
- Disconnect it, then change your password from Settings → Security. Connecting an assistant needs your sign-in, so an unknown entry means someone signed in as you.