# Connection permissions

See what your agent can do, what you must approve, and how to remove access.



## What you need [#what-you-need]

Sign in to Tyton as the site owner. Decide which website your app should work on before you connect it.

## Grant the right access [#grant-the-right-access]

1. When your app opens Tyton, check the app name on the sign-in page. If it shows **name not verified**, check the web address shown with it before you continue.
2. Under **Website it can use**, pick one website. Each connection covers that website only. To work on another website, connect again and pick it.
3. Select **Allow access**. Ask your app to read setup progress and tell you the website name or address.
4. Review the proposed conversions separately. Connecting doesn’t approve conversions or turn tracking on.

Once connected, the app can set up and change tracking for that website, and remove it from Tyton, until you disconnect it. It can’t see or change your billing. Before it approves a plan or deletes a website, it still needs your clear agreement to the exact proposal, including whether you want approval only or approval followed by starting tracking after checks.

If your app connects with a server key instead, the key gives the same access to one website. Pairing codes for keys are single-use and expire after 15 minutes. Give a code only to the agent you intend to connect.

## What stays private [#what-stays-private]

The public Pixel ID and Tyton browser key may appear in website code. The Tyton server key, Meta CAPI token, audit write capability, and signup polling token must remain private. A Meta token belongs in Tyton’s secure token input, never in MCP settings.

Website editing, publishing, backend access, and Meta access require permissions outside Tyton.

## Success check [#success-check]

Your app can read setup progress for the website you picked. On the **Integrations** page, the app appears under **Connected apps and keys** as soon as you allow access, and shows **Connected** after it has used it.

## Revoke or repair access [#revoke-or-repair-access]

Open the **Integrations** page in your Tyton dashboard. Under **Connected apps and keys**, find the app and select **Disconnect** (or **Revoke** for a server key). Removing Tyton from your app doesn’t revoke its access. If a key is lost, create a new connection and revoke the old one. See [keys and secrets](/docs/account/keys).