One-time access - Darwin

One-time access is the default when a provider and capability support it. The user signs in or supplies a credential for the current interaction, and Darwin expires or consumes that assignment after the bounded work finishes.

Bind the temporary grant

connection_required -> review provider and scopes -> authorize once
                    -> resolve during execution -> expire assignment

The grant is limited to the current user, AI, capability revision, Action, interaction, provider, and requested scopes. It cannot silently become reusable access.

Save only by a separate choice

If the user later chooses “Save in Darwin Vault,” Darwin requests explicit consent and creates a new Vault item and grant. Conversation text, a tool argument, or the remote AI cannot upgrade one-time access into persistent access. For provider authorization-code flows, continue with OAuth.

Last modified on September 22, 2026