# Access levels

Each connection has one level and the folders and threads you choose. It can never do more, whatever it asks for.

## The five levels

| Level | What it does | Default for |
|---|---|---|
| Edit and organize | Read, add and edit notes, and organize threads and folders, including Archive and Trash. Can’t delete permanently. | — |
| Read and add | Read and search notes. Add notes, threads and reminders, and change or move to Trash the notes it added. Can’t change other notes. | Apps and coding agents |
| Read only | Read and search notes, including earlier versions. No changes. | — |
| Add only | Add notes to threads you choose and see those threads’ titles. Can’t read notes. | Scripts and workflows |
| Add to Inbox | Add notes to your Inbox. Can’t read notes. | Free accounts |

Your assistant’s own approval settings can only narrow this access.

## Choose where

**All threads** includes current and future content in your account. **Selected folders and threads** limits access to your choices; a selected folder includes its subfolders and what you add to it later.

Exclude private folders or threads with **Customize access**. Exclusions always win. References never grant access to their originals.

## Never included

| What | Why |
|---|---|
| Deleting permanently and emptying Trash | It can’t be undone. |
| Sharing and the people you share with | It reaches other people. |
| Sending notes with @, Stop this request and answering a question | It speaks for you. |
| Drafts and private recovery versions | They are private. |
| Export and import | It moves your whole workspace. |
| Connections, tokens, URLs and their settings | A connection can’t give itself more access. |
| Your account, plan and notification settings | They are not notes. |

## Shared threads

In a thread or folder you share with other people, a connection that reads adds and changes notes only where you allow it, place by place. When you address a connection there, or it is refused there, choose **Allow here**. The connection’s details list **Shared threads it can add to**, each with **Remove**.

A URL that adds notes from another app adds to its thread without asking. **Add only** needs no permission in a thread you selected for it by name.

## Confirm it’s you

Before anything gives a connection access, more access or more time, ThreadPage asks you to confirm it’s you. One confirmation covers 10 minutes.

Narrowing access, removing a permission, pausing and disconnecting never ask.

## How long a token works

You choose 30, 90 or 365 days when you create or renew a token; on **Edit and organize**, 30 or 90. A token unused for 90 days stops working. Seven days before a token stops, ThreadPage reminds you, with **Renew**. **Renew** keeps the same token working for a new term.

## If something can’t be done

When a connection needs more access for what you asked, it can give you a link. The link opens the connection with the level it needs chosen. Nothing changes until you save it and confirm it’s you, and the link never adds shared threads or more folders.