You authorize capabilities—not a new workspace role.
OAuth lets Claude, Codex, or ChatGPT act as the signed-in HumanDesign.ai user. It does not create access, change membership, or grant an agent ownership of a workspace.
What workspace selection means
The consent screen asks “Where should Claude work?” because a paid account may have both a personal library and one or more team or business workspaces. The choice sets the data boundary—it is not an extra membership permission. Every call still checks the user's membership, role, capability grants, ownership, and product entitlements. Authorizing Builder applies to eligible projects inside that boundary; projects do not require separate OAuth grants.
Free and Individual accounts: there is no workspace selector. The connection is limited to the personal-account boundary and the user's own primary chart; Individual also includes account usage. Personal or Pro is required for other people's charts and wider platform tools.
To keep consent unambiguous, Personal and Pro show one combined Charts and library permission instead of overlapping “your chart” and “library” checkboxes. In the Personal boundary it includes the primary chart and permitted library; in a selected workspace it is reduced to the charts and composites allowed inside that workspace.
Identity scopes and capability grants
The OAuth protocol requests only identity and session scopes such as email, profile, and offline_access. After sign-in, HumanDesign.ai derives the following internal capability grants from the selected account boundary, membership, role, ownership, and entitlements. They are enforcement labels, not extra OAuth scopes a client can request to bypass membership.
| Capability grant | Allows |
|---|---|
charts:read | Read authorized chart records |
charts:generate | Create the connected user's primary chart after preview and confirmation |
library:read | Search and retrieve permitted library items |
library:organize | Manage folders and item placement |
reports:read | Read templates, reports, and generation status |
builder:read | Read entitled Builder projects and runs |
builder:write | Cancel an active Builder run when permitted |
account:usage | Read balances, quota, and summarized usage |
What appears in the agent
tools/list is filtered by the authenticated user's current capability grants, membership, workspace role, ownership, and entitlements. Upgrades, downgrades, role changes, and revoked grants take effect after reconnect or token refresh. Operation status and cancellation also recheck the capability that authorized the original operation, so removing a permission cannot leave an older job accessible through the operation tools.
Confirmation and external effects
When a tool advertises preview or confirmation, the confirmation is bound to the actor, boundary, action, arguments, destination, maximum charge, and expiry. Changing any of those details invalidates it. Primary-chart creation uses a one-unit preview and confirmation; deleting a library folder also confirms. Operation and Builder run cancellation execute directly only when the current state is cancellable. Higher-risk publishing and delivery actions remain unavailable in this release.
Revoke access
Disconnect HumanDesign.ai in the client's connector settings or clear the MCP authentication. Revocation ends the delegated connection; it does not delete HumanDesign.ai data or change membership.