> ## Documentation Index
> Fetch the complete documentation index at: https://docs.geldee.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions

> Choose read access, proposals and direct editing separately, with account restrictions and expiry.

You choose what a connection can access. Read access, proposals and direct editing are independent decisions.

| Mode | What it allows | What it does not allow |
| - | - | - |
| Read access | Read the selected financial areas within the grant | Proposals, edit previews or financial edits |
| Propose changes | Submit a pending change for review, with the required read access | Approving its own proposal or applying it directly |
| Direct editing | Preview and apply supported edits in the financial areas you explicitly enabled | Editing other areas or approving a pending proposal |

**Select all** selects available read permissions only. It never enables proposals or editing. Direct editing requires a separate acknowledgement and each edit's required read permissions.

## Accounts

All accounts grants workspace-wide access for the chosen permissions, including future accounts. A selected-account grant restricts supported account and transaction tools. Whole-workspace summaries and other unsupported tools become unavailable; they are not silently presented as filtered household totals.

## Expiry

Choose the lifetime shown in Geldee's consent or management screen. Finite grants expire. **Never expires** is an explicit choice that lasts until revoked or otherwise invalidated. Individual OAuth credentials can still expire and require reconnection.

## Change access

Open [Settings → Connect your AI](https://app.geldee.com/settings#ai), select the connection, change its permissions or account restrictions and save. Reductions apply to future requests. Added permissions require fresh authorization when the existing client's consent does not include them.

Read the [generated permission reference](https://docs.geldee.com/reference/scopes.md) for exact scope names and dependencies. The live identity and catalog determine the connection's current authority.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.