Connect AI documentation · Full API reference & configuration details

Auth for unattended agents

Agents that run on a schedule or respond to events without a user in the loop need credentials that don't depend on interactive consent. Use a Personal Access Token (PAT) tied to a service workspace, store it in your secret manager, and connect using the PAT as the password on the standard JDBC/ODBC/Python connection string.

For agents acting on behalf of an end user, prefer per-user OAuth delegation: the agent authenticates with a workspace-level credential and passes the requesting user's identity per call, so row-level permissions in the source are still enforced.

Reference: Authentication in the Connect AI docs covers PAT generation, header format, and per-request user identity.