Least privilege
Request only the scopes required for the declared task.
Connected work
Tools are capabilities with permissions, not decorative badges.
Every integration is designed to declare scopes, data movement, rate limits, failure behavior, and revocation. Connectivity alone never implies trusted operation.
Revocable
Users retain one place to see and remove active connections.
Testable
Failures, retries, rate limits, and stale credentials enter the test contract.