Security and data

Signing in and connecting

OAuth 2.1 with PKCE. When you connect an app, you sign in on octopus-brain.com, never inside the AI app. The app only receives an Octopus token for the teamspace you chose.
Short-lived tokens. Access tokens last one hour. Refresh tokens change on every use, and reusing an old one revokes the whole connection. A connection lasts at most 180 days before you approve it again.
A clear consent screen. It shows which app is asking (Claude, Claude Code, ChatGPT and Cursor are marked verified; any other app is labelled unverified), where you'll be sent back, your account, the teamspace and the permissions. Nothing is ever approved automatically.
Separate passwords. Your AI provider never sees your Octopus password, and Octopus never sees your Claude, ChatGPT or Cursor password.

Shown once, then stored only as a hash.
Bound to you and one teamspace; they act with your role.
Expire after 30, 90 or 180 days (90 by default); up to 10 per person and teamspace. Read-only keys are possible.
Changing your password, or leaving the teamspace, makes them stop working.

Your AI sees what you see. Every request is checked against your current membership and role. Members can't read other members' private conversations; admins have the same oversight as in the Octopus app.
Two permissions. Read lets the app read your teamspace. Make changes on your behalf lets it write; you can turn it off on the consent screen.
Confirmed actions. Destructive actions need a single-use confirmation, valid 5 minutes and tied to that exact action, so an approval can't be replayed or reused for something else.
Prompt-injection guard. Text coming from teammates, files and connected apps is fenced so your AI treats it as data, not as instructions.
Audit. Every change made through Octopus MCP is recorded in the teamspace's activity log, except changes to your private brain (« My brain »), which nobody else can see, admins included.

You: disconnect an app or revoke a key at octopus-brain.com/account — it stops right away.
Admins: removing a member cuts all of that person's connections and keys.
Password change or reset: all your connections and keys stop working.

Your teamspace data stays in Octopus.
What your AI app reads through Octopus is sent to that app's provider (Anthropic, OpenAI, Cursor…) and processed under your agreement with them — check its data and training settings.
The EU-hosting option of the Octopus app doesn't cover data read through external clients: teams with strict residency requirements should keep their data out of external AI apps.

Write to hello@octopus-brain.com. Please give us time to fix it before any public disclosure.

Need help? Write to hello@octopus-brain.com.