Sign-in and scopes

Foldr is its own OAuth 2.1 server for this. The assistant never sees your password. You sign in to Foldr in your browser, as you always do, and then agree to a named app and a list of things it may do.

How the sign-in works

• The assistant finds Foldr’s sign-in details from https://<your Foldr address>/.well-known/oauth-protected-resource.
• A self-registering assistant registers at /oauth/register. Redirect addresses must be https, or a loopback address.
• The assistant uses the authorization code flow with PKCE, and must name Foldr’s MCP address as the resource the token is for (standard MCP clients do). Foldr then accepts that token at /mcp only, and the REST API refuses it. If the assistant names no resource, Foldr still issues the token, but it is an API token: the REST API accepts it, within the scopes it was granted, and /mcp refuses it with the same 401 as any invalid token. The confinement is unconditional: a refreshed token keeps the resource it was made with. The scopes an app may be granted come from its policy and are the same on either surface, so the policy is what limits an app. The delete, overwrite and move scopes are granted only to an app an administrator has given a separate destructive policy, and no MCP tool uses them.
• The access token lasts one hour, and the assistant renews it on its own. A connection lasts up to 90 days by default and ends after 30 days unused. An administrator can change both under Settings > Connected apps > Settings.
• Foldr keeps only a hashed copy of each token.

Scopes

Scope	What it allows	Who can grant it
foldr.read	Every read tool: list shares and folders, read files, search, see fields, sharing and your own activity.	Any app
offline_access	Staying connected without signing in again.	Any app
profile	Seeing your name and email.	Any app
files.write	Create folders and files, rename, copy and add to files, in the shares an administrator allows. Never delete, move away or replace.	Only an app whose policy an administrator agreed, and only if you agree when connecting
fields.write	Set a custom field on one file.	As above
sharing	Ask to share files on your behalf. An approver decides each request.	As above

There is no scope that lets an assistant delete, move or replace files through MCP. Foldr’s REST API has separate scopes of that kind, and the MCP server offers none of them.

Which tools each scope gives is on the Tool reference.

Ending a connection

• You: open your account settings, go to Security, find Connected apps, and click Disconnect beside the app. This works even when an administrator has since switched connected apps off.
• An administrator, for one person: Settings > Connected apps > Connections, then Disconnect on one row, or Disconnect everything for this person.
• An administrator, for an app: Settings > Connected apps > Apps, then Revoke. Everyone connected through that app is disconnected, and the app cannot be used again. If it registers itself again, it comes back as a new app.

A connection also ends when:

• the person is deleted, or is disabled or removed in the directory. It ends on the next request, not at the token’s own expiry;
• its lifetime runs out.

A connection is paused, not ended, while the person lacks Connect apps. It works again when they have it back.