WorkOS by Befocusy WorkOS Help center

Security of the connection with Claude or ChatGPT

Connecting Kairos to Claude or ChatGPT lets that app work with your WorkOS. Since the app acts on your behalf, the connection is protected on several levels.

Only you authorize the connection

  • To connect, you sign in with your WorkOS email and a one-time code, choose your account and explicitly authorize access.
  • The connection uses the OAuth standard with reinforced verification (PKCE): nobody can reuse your authorization from somewhere else.

Credentials that expire and are monitored

  • The app's access expires every hour and renews itself only while you use it. If about 90 days go by without using it, it expires completely.
  • WorkOS doesn't store those credentials in plain text, only a fingerprint that lets it check them.
  • If someone tried to reuse a credential that has already been used, for example a stolen one, WorkOS revokes all the credentials of that connection.
  • If your user is deactivated in WorkOS, the connection stops working at that very moment.
  • There are usage limits to curb mass calls.

The same permissions as you

The app sees and changes exactly what you could see and change in WorkOS, with your role and your permissions. For example, it can only read the meetings where you're the owner or a participant (unless you're the Owner), and never other people's email.

What can't be done this way, on purpose

Inside WorkOS, actions that reach third parties go through a review screen before they run. Through this connection that screen doesn't exist: the only approval is your app's, which may be set up not to ask. That's why, from Claude or ChatGPT, Kairos can't:

  • Send emails. It can prepare the draft; sending happens from WorkOS.
  • Post on social networks or send the newsletter. It can create the post for the AI to write, but it stays in review.
  • Add guests to an event, because they would receive an invitation by email.
  • Delete events, or delete or archive records.

That way, even if an email or a page with hidden instructions managed to trick the AI, it couldn't get anything to other people.

Your app asks you to confirm

WorkOS flags every action that creates or changes data so that Claude or ChatGPT ask for your approval before running it. We recommend not ticking “always allow” for those actions.

How to cut off access

Disconnect WorkOS from your app's connectors settings. If you need to cut it off immediately for another person on your team, deactivate their user in Settings → Team. More details in “What Kairos can do from Claude or ChatGPT, and how to disconnect it”.