AI Agents and Connected Apps

Last updated: October 14, 2026

Our position on AI agents

Encore welcomes AI agents and AI assistants that act on behalf of our customers. A customer can authorize an AI assistant, such as Claude or ChatGPT, or another third-party app to work with their Encore account through the approved interfaces below. The assistant then acts on your behalf, with the access you approve and nothing more.

Approved interfaces

  • The Encore Model Context Protocol (MCP) server at https://platform.gainencore.ai/api/v1/mcp, protected by OAuth 2.0 with PKCE.
  • The Encore REST API, documented at api.gainencore.ai, using an API key created in your organization.
  • The Encore platform in a web browser, used by you or by an authorized agent working under your supervision.

Assistants and apps should use these interfaces instead of asking for your password. When you connect an assistant through OAuth, you approve access on Encore's own sign-in page and your password is never shared with the app.

Third-party access and data sharing rules

  • Third-party apps and AI agents get access to your account data only after you, or an administrator of your organization, grant access through OAuth or by issuing an API key.
  • Access is limited to the organization and the permissions of the user or API key that authorized it.
  • Actions taken through an approved interface are attributed to the user or API key that authorized them.
  • Your organization decides which agents and apps to connect and remains responsible for them under its agreement with Encore.
  • Data an app receives is also governed by that app's own terms and privacy policy. How Encore handles personal data is described in our Privacy Policy.

Delegated access for your team

Administrators can give colleagues delegated access by inviting them to the organization with a role, and can give an integration access by creating an API key for it. Removing the member or deleting the key ends that access.

Review and revoke access to connected apps

  • OAuth connections, including MCP connectors in AI assistants: disconnect the connector in the assistant's settings, and review or revoke connected applications in your account at your account settings.
  • API keys: open Settings, then API Keys, in the Encore platform and delete a key to revoke access for the app using it.

Contact

Questions about connecting an AI agent or a third-party app to Encore? Contact us.