Skip to main content

​
Identity and authorization

Your AI application signs in through WorkOS and obtains delegated access. Plastics checks the selected seller organization, active membership, account provisioning, and current role permissions on authenticated requests. The connection does not use a shared owner API key, and the browser does not receive provider management credentials. Only the seller account configured for the trial is accepted by that dedicated service. Buyer organizations and linked customer accounts cannot use the seller connection. Seller access does not authorize customer impersonation.

​
What the AI application receives

A permitted tool returns the data authorized for the signed-in seller and that operation. Catalog, stock, document, and extraction permissions remain separate. Data returned by a tool is passed to the AI application you selected and is subject to that provider’s policies and your workspace agreement. Review those policies before connecting sensitive business information. Supporting interactive controls are authorized on every call. Document downloads use the existing document permissions and required user interaction. Upload and extraction features are separately gated and use the native quarantine, scanning, and processing controls when enabled.

​
Status and examples

The portal’s service check reports registration and account availability. It does not establish a connection from your AI application. A service failure produces an unavailable state, not a success badge. Expanded tool examples contain illustrative data. Preview workflows do not become live because they appear in the catalog or because the AI application has signed in.

​
Revoke access

An administrator can remove the account’s MCP enablement, your role’s MCP access, or individual tool permissions. You can also disconnect the AI application and revoke its consent through the available WorkOS connection controls. Subsequent requests must pass the current checks; an existing connection does not preserve revoked permissions.