Skip to main content
Connecting a tool doesn’t hand the agent the keys to everything. You control each capability a connector exposes — separately, and at any time.

The three settings

Every tool a connector offers has one of three settings:
  • Always allow — the agent uses it without asking. Default for reading.
  • Needs approval — the agent pauses and shows you the change first. Default for writing.
  • Blocked — the agent can never use it.

Sensible defaults

When you connect a tool, Rivvi starts you off safely:
  • Reads → Always allow. Looking up a contact or pulling a report is low-risk, so it just works.
  • Writes → Needs approval. Anything that changes data in your tool — a note, a task, an update — waits for your sign-off.
You can tighten or loosen any of these. Set them one capability at a time, or change a whole group (all reads, or all writes) at once.

Setting permissions

1

Open the connector

Settings → Connectors, then select a connected tool.
2

Review its capabilities

They’re grouped into read-only and write. Each shows what it does.
3

Choose a setting per capability

Pick Always allow, Needs approval, or Blocked. Changes take effect immediately.

Approving a write in chat

When the agent wants to use a Needs approval capability, it doesn’t just do it — it shows you an approval card in the chat that previews the exact change: which tool, which action, and the specific details. You Approve or Decline. Nothing reaches the external tool until you approve.
Your permission settings are enforced on Rivvi’s servers, not just in your browser. A capability you’ve blocked stays blocked no matter what — the settings you see are the real gate.

Muting vs. disconnecting

Two different things:
  • Mute (a switch in the chat’s + menu) temporarily hides a connected tool from the agent for your current browser. Your credentials and settings stay intact — it’s a quick “not right now.”
  • Disconnect your account (in the connector’s Your account panel) signs you out. Other teammates stay connected. Rivvi revokes the provider token when it can and deletes your stored secret.
  • Disable for the team (admin) turns the connector off for the organization. It does not wipe every teammate’s personal connection in one click.

Next

Using connectors in chat

Connect HubSpot