> For the complete documentation index, see [llms.txt](https://docs.trycaliber.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.trycaliber.ai/getting-started/access-you-need-to-grant.md).

# Access you need to grant

Procurement-friendly table of auth types, who must approve, and what Caliber reads.

Use this page for security and IT review. **Exact OAuth scopes and key formats** are documented on each integration page under Connect your providers (and Alerts for Slack). This table stays high-level on purpose.

Role and permission prerequisites: [Prerequisites](/getting-started/prerequisites.md).

## Caliber login (always)

| Item       | Detail                                                           |
| ---------- | ---------------------------------------------------------------- |
| Auth       | Google or Microsoft OAuth to the dashboard                       |
| Membership | Invite token, or Entra domain join on an allowlisted work domain |

## Integrations

| Integration                     | Auth type (summary)                                     | Who must approve                    | What Caliber reads                                          | What Caliber does not read                                            |
| ------------------------------- | ------------------------------------------------------- | ----------------------------------- | ----------------------------------------------------------- | --------------------------------------------------------------------- |
| Anthropic (Claude) - Enterprise | Anthropic Admin API key and/or Enterprise Analytics key | Anthropic Org Owner / Primary Owner | Usage, cost, roster / analytics from Anthropic’s APIs       | Source code; full chat unless Analysis is enrolled separately         |
| Anthropic (Claude) - Team       | Caliber station plugin (org ingest on devices)          | Caliber admin + IT / user           | Device-sourced usage estimates for Claude from Anthropic    | Anthropic invoice-grade org analytics (not available on Team via API) |
| Caliber Analysis (MDM / plugin) | Org Analysis ingest token + device or plugin            | Caliber admin + IT / user           | Redacted transcript messages for enrolled users             | Unredacted secrets the client strips before ship                      |
| Cursor                          | Team API key                                            | Cursor Team Admin                   | Daily cost, sessions, lines, acceptance                     | IDE file contents                                                     |
| OpenAI                          | Admin API key                                           | OpenAI org admin                    | Org token usage by user/model                               | Prompt bodies from the Admin usage API                                |
| ChatGPT Enterprise              | Admin key + workspace UUID, or Users CSV                | ChatGPT Enterprise admin            | Seats and daily usage                                       | Conversation content via this connector                               |
| Microsoft Entra ID              | OAuth or app registration                               | Entra admin (consent)               | Employee roster for adoption and manager routing            | Mailbox or Teams chat content                                         |
| Shapes                          | Admin refresh token                                     | Shapes admin                        | Org structure and headcount                                 | (See product modal; used for reporting tree)                          |
| GitHub                          | GitHub App or PAT                                       | GitHub org owner / admin            | Commit metadata, merge status, repo names, `refs/notes/ai`  | File contents and source (per connect UI)                             |
| GitLab                          | PAT (`read_api`)                                        | GitLab token owner                  | Stored for attribution; sync coming soon                    | N/A until sync ships                                                  |
| Jira                            | OAuth or email + API token                              | Atlassian admin / token owner       | Issues (\~90 days) for delivery metrics                     | Attachments / comments beyond configured issue fields                 |
| Slack                           | OAuth (see Alerts)                                      | Slack admin who can install apps    | Outbound posts and DMs only                                 | Channel history or messages                                           |
| Langfuse / LangSmith            | Project API keys                                        | Project owner                       | Traces / root runs (\~30 days) for agents                   | Outside selected projects                                             |
| AWS Bedrock                     | IAM assume-role (preferred) or keys                     | AWS admin                           | Invocations, tokens, latency from CloudWatch / Bedrock APIs | Application data in your AWS accounts beyond those metrics            |
| Salesforce                      | In-app OAuth                                            | Salesforce admin                    | Tokens today; CRM sync later                                | N/A until sync                                                        |
| Mixpanel                        | Service account + project                               | Mixpanel analyst+                   | Credentials today; events later                             | N/A until sync                                                        |
| Snowflake                       | Caliber-generated key pair                              | Snowflake user admin                | Encrypted key; warehouse queries later                      | N/A until sync                                                        |

{% hint style="warning" %}
Caliber admins never configure Railway, master encryption keys, or Caliber-owned OAuth apps. Customer setup is keys, OAuth consent, MDM tokens, and optional IAM roles only.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.trycaliber.ai/getting-started/access-you-need-to-grant.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.