Is my password shared with Claude?
No. You sign in through OAuth on your platform login with your existing credentials. Claude receives an access token scoped to what your login can already see, never your password, and every request it makes is recorded in the audit logs.
In detail
No. The connector uses OAuth. When a user adds it in Claude, they are redirected to your platform login and sign in with the credentials they already use. Claude receives an access token, never the password, and never sees or stores it.
Each user authenticates with their own credentials, never with a shared key. That keeps access personal and traceable: the token Claude receives is tied to that user and limited to what their login can already see.
The safeguards around access
- Your permissions are the ceiling: no other merchant's data is reachable through the connector.
- The connector is read-only, so the token cannot be used to move money or change settings.
- Every question Claude runs against your data is recorded in the audit logs, under the user who asked.
- Claude retrieves only the data a question needs, at the moment it is asked.
Connecting takes a few steps in Claude.ai or Claude Desktop: add a custom connector with the URL your NORBr contact shares, sign in through your platform login and grant access once. No API key, token or extra setup is needed on the user's side.
For security teams, this means the connector follows the same access model as the Console, with no new credential to manage and a clear record of every request.