Connectors and Browser Policy

1. Connected services

Colver uses a connection service to link supported third-party accounts. When you connect an account, the authorisation screen belongs to the selected service and identifies the requested permissions. The connection service manages the resulting token; Colver stores the connection reference and approved tool state needed to use it.

Use the narrowest permission available. You can revoke a connection in Colver where supported and should also revoke it with the external provider when you no longer want it used. The provider's terms and privacy policy also apply.

2. Tool approval

An agent can propose a connector or tool, but it must not invent authorisation. Sensitive actions should identify what will happen, which account or destination is involved, and whether the action can be undone. Colver may require approval for each action or tool class.

Do not approve a tool you do not understand. Review recipients, files, amounts, and final content before sending, publishing, deleting, or changing access.

3. Remote browser sessions

A browser-capable agent can open a short-lived remote session to navigate approved public or authenticated pages. Private network destinations are blocked. Uploads are disabled unless a future workflow expressly enables and protects them. The canvas can show the current browser view, and an authorised user can take manual control where supported.

A session closes after the configured loss of attention or heartbeat so it does not remain active indefinitely. Manual takeover ends the automated session afterwards. Colver does not intentionally keep a browser recording, but the browser provider may process page content and operational metadata to deliver the session.

4. Credentials and private data

Enter credentials only in the provider's own sign-in page or Colver's dedicated secret control. Never paste passwords, private keys, recovery codes, or payment-card details into chat. A model should receive a capability or tool result, not the underlying secret value.

You are responsible for having permission to access pages and data. Do not use the browser or a connector to bypass access controls, collect data unlawfully, or impersonate another person.

5. Provider limits and failures

External providers can change scopes, APIs, rate limits, or availability. Colver may pause a connector or browser feature if a provider, legal duty, or security review requires it. Always verify whether a proposed external action completed.