# Connected apps

Connect apps such as Claude, ChatGPT or a script to your AdPix account so they read data with your own access. You choose which websites and which permissions, and you can disconnect at any time.

## Overview

**Connected apps** let you connect an app - an AI assistant such as Claude or ChatGPT, a tool such as Cursor, or your own script - to AdPix so it reads data through the API or MCP **as you**. The connection uses the OAuth standard: the app never sees your password.

## Connect an app

1. In the app, start connecting to AdPix. You go to the AdPix sign-in (if you aren't signed in) and then to the **Connect** page.
2. Under **Permissions**, tick only what the app needs. An app never gets more than it asked for.
3. Under **Websites**, choose **All my websites** (including ones you get later) or **Choose websites** and tick one or a few — grouped by organization and account, with search and select-all.
4. Click **Allow**. You return to the app and the connection is live.

> **Your role is the ceiling**
>
> Change permissions (adding annotations, managing fraud blocks) only work on websites where you are at least an Editor. Visitor identifiers are only shown where your role and Identifiers permission already show them. The Connect page notes this next to each website.

## Manage connected apps

Open **API & MCP** from the account menu (the avatar at the top) and choose the **Your connected apps** tab. For each app you see its permissions, websites, when it was connected and when it was last used. **Revoke** cuts the app off immediately. A connection made with **All my websites** follows your access: websites you get later are included without reconnecting.

An account admin sees, under **API & MCP → Service tokens**, the apps connected to the account's websites and can **Block** an app for the whole account.

## Permissions

| Permission | What it gives |
| --- | --- |
| Read reports | Traffic, engagement, conversions and the standard reports |
| Read website settings | Data streams, events, custom definitions |
| See your websites and quota | The connected websites and today's usage |
| Read fraud protection | Invalid clicks, sources, networks |
| Read marketing | Cost, ROAS, marketing mix, lift |
| Read realtime | Visitors right now |
| See visitor identifiers | Only where your role already shows them |
| Change website settings | Annotations, key events, definitions, segments (Editor and above) |
| Manage fraud blocks | Block and release, allowlist, thresholds - never turns blocking mode on |

## Frequently asked questions

### Can an app see more than I can?

No. An app only works on the websites you picked when connecting, and always under your current role. If you lose access to a website, the app loses it on its next request. Super-admin rights are never shared with apps.

### Why isn't a website in the connect list?

Only websites you can access right now are listed. If an account admin blocked this app for their account, that account's websites are not listed either.

### What does "This connection request has expired" mean?

A connection request is valid for ten minutes and can be used once. Go back to the app and start connecting again.

## Related

- [API & MCP](https://docs.adpix.io/en/analytics/admin/api-access/)
- [Public API reference](https://docs.adpix.io/en/developers/analytics/developers/public-api/)
- [Roles and capabilities](https://docs.adpix.io/en/analytics/admin/roles-and-capabilities/)

---

[Docs](https://docs.adpix.io/en/analytics/admin/connected-apps/) · AdPix