Developers & AI
Tutorial: Revoke or disconnect an AI agent
Cut off Claude or Cursor access quickly — revoke grants, keys, or regenerate secrets.
Use this when an agent should no longer access the store, or a secret may have leaked.
Step 1: Open /dashboard/developer and expand the app tied to that agent.
Step 2 — OAuth: Under OAuth connections, Revoke the Connected grant. Interactive Claude/Cursor tokens stop working for that store.
Step 3 — API keys: Revoke or Rotate each key. Update any scripts that still use the old key.
Step 4 — Client secret: Regenerate secret if the OAuth client secret was exposed. Update Claude/Cursor with the new secret before reconnecting.
Step 5: In Claude/Cursor, remove or disable the Ettajer MCP connector so it cannot retry with cached tokens.
Step 6: Check Activity for unexpected calls around the incident time.
Step 7: Optionally delete unused apps entirely once nothing depends on them.
Step 8: When reconnecting later, create fresh credentials and start with scopes that exclude themes:publish.
Prevention: never paste secrets into chats; prefer short-lived OAuth over long-lived keys when possible.
Was this article helpful?
Contact support