Every AI assistant you connect to ISO Mate appears on the Connected apps page, where you can see its account, its access and when it was last used, and revoke it in one click. Administrators can also see every connection in the account, turn AI assistant connections off for the whole account and register OAuth clients for their organisation’s own apps.
How to review your connections
- Open the profile menu in the top bar and choose Connected apps.
- Stay on the My connections tab. It lists every assistant you have connected.
- Check each row: the App, the Account it can reach, the Access you granted per area, when it was Connected and when it was Last used.
If you connected the same assistant to two accounts, you see two rows, one per account, each with its own access.
How to revoke a connection
- On Connected apps, find the connection you want to remove.
- Click Revoke connection and confirm.
The assistant loses access immediately and must be connected again to regain it. Revoking a connection does not affect your personal API tokens, and it does not undo changes the assistant already made.
To change the access of a connection, connect the same assistant to the same account again and choose the new levels. The new connection replaces the old one.
How ISO Mate protects your data
- One account per connection: a connection only ever reaches the account you chose on the consent screen.
- Capped by your role: an assistant can never do more than you can, and ISO Mate checks your role on every request. When your role changes, your connections follow straight away.
- Read first: Read is preselected and write access is never preselected, so an assistant only gets write access when you choose it.
- Human only actions: assistants can never manage users, roles, API tokens, OAuth clients or billing, never create or change workflows, and never sign policy attestations.
- No stored passwords or tokens: your assistant never sees your ISO Mate password, and its access is short lived and renewed in the background for as long as the connection stays active.
- You are told about new connections: ISO Mate sends you a notification and an email whenever a new app is connected to your user.
- Unused connections expire: a connection that has not been used for a long time stops working and must be connected again.
What the app labels on the consent screen mean
- Recognised app: ISO Mate has confirmed the publisher, for example a well known AI assistant, and shows its official name.
- Organisation app: an administrator of your account registered the app, and the screen shows who registered it.
- External app: the app identifies itself with a published address, which the screen shows, but ISO Mate does not know its publisher.
- Unverified app: ISO Mate cannot confirm who publishes the app. Only continue if you trust it and started the connection yourself.
For administrators
The options below need permission to manage connected apps in the account.
How to see and revoke every connection in the account
- Open Connected apps from the profile menu.
- Select the Account connections tab. It lists the connections of every member, with the User who connected each one.
- Click Revoke connection on any row to remove a single connection.
How to turn AI assistant connections off for an account
- Open Account Settings and find the AI assistant connections card.
- Turn off Allow AI assistants and apps to connect with OAuth and confirm.
Every connection in the account is revoked at once, and no AI assistant or app can connect until you turn the setting on again. The card also shows how many connections are active. Connections are allowed by default.
How to register an organisation OAuth client
ChatGPT, Claude and Gemini connect without registration. Register a client when your organisation builds its own app, or when an assistant asks you for a client ID and secret.
- Open the profile menu and choose OAuth clients.
- Click Register client and enter a name and the redirect URIs of the app.
- Choose Public for desktop, command line or browser apps that cannot keep a secret, or Confidential for server side apps.
- Save, then give the client ID to the app. A confidential client also receives a secret, which is shown only once, so store it safely straight away.
Members who connect through your client see it on the consent screen as an Organisation app registered in your account. Each member still chooses their own access, capped by their role.
Related articles
- Connecting ChatGPT, Claude and Gemini to ISO Mate
- Connecting via the MCP Server
- Managing Users and Roles