Permissions and security
The assistant acts in Proton on your behalf, with your permissions, and nothing more. Every call goes through the same rules as the screens, and whatever the assistant saves is recorded under your name in Proton's history.
What each call checks
Before running a tool, Proton checks, in this order:
- You are active in Proton and in the connection's organization.
- Full access license in the organization.
- Connector enabled in the organization and, to save anything, write access enabled in the organization and in the connection.
- Profile permission required by the tool, as on the Profiles screen. See Tools.
- Team rule of the automation, dataset, or run: a private automation only for people on one of its teams, and saving only for a team with create, update, or full access.
After that, the tool uses the same paths as the screens, with the same validations and the plan's limits. When a rule refuses a call, the assistant explains why and doesn't try to reach the same result some other way.
Read and write
Atomic enables the connector per organization, at two levels:
- Read only: queries, reports, logs, and evidence. Nothing is created, changed, or run.
- Read and write: also create, change, delete, and run.
The connection keeps the level it had at the time of authorization. If write access is enabled later, connect the assistant again. If the assistant tries to save with a read-only connection, Proton refuses, and the assistant asks for a new authorization.
With write access enabled, what the assistant can save is still limited by your profile: a read-only profile never saves anything, not even through the connector.
Actions that require confirmation
- Destructive: deleting, stopping a run, turning off a cloud runner, canceling a scheduled run. These are flagged for the assistant, which confirms with you before calling them.
- Runs: the assistant confirms before starting or scheduling.
- Cloud runner: starting a cloud runner starts a paid machine, billed by the hour until it's turned off. The assistant warns you first.
Read the confirmation before accepting: it says what will be done and to what.
Secrets
- The connector never returns tokens, passwords, or credentials. Encrypted values (parameters and variables marked as
encrypted) come back as
***. - An environment secret variable can be saved through the connector, but its value never comes back.
- Integration credentials (git, Jira, Xray) stay in Proton and never go through the assistant.
Whatever you type in the chat goes through the assistant's provider. For production passwords, prefer entering the value on the Proton screen.
Git repository
The connector only reads the project's git repository, through the integration registered in Proton, and never writes
to it. The project check (check_project) doesn't return file contents either: for a committed secret, it only reports
the file, the line, and the type.
In a project from scratch, it's the assistant that writes the code and pushes it, on your machine, with your git access.
Call log
Proton logs every connector call, whether it ran or was refused, with the reason for the refusal and the duration. The log never stores the values sent or the result; for writes, it stores the id of what was created and the field names.
Limits
| Limit | Value |
|---|---|
| Tool calls per connection | 60 every 5 minutes |
| Tool calls per person | 120 every 5 minutes |
| Tool calls per organization | 400 every 5 minutes |
| Tool calls per organization, per day | 5,000 (the day resets at midnight Brasília time) |
| Requests per connection | 180 every 5 minutes |
Above the limit, the tool responds with an error that the assistant shows you. Wait a few minutes and ask again.
Connection access
- Authorization happens on the Proton screen, with your sign-in: the assistant never receives your password.
- The assistant's access lasts 1 hour and renews automatically while the connection is valid (30 days).
- Proton stores only the hash of the tokens, never the token itself.
- To remove access immediately, use Disconnect under My Profile > AI Connections. Changing your password disconnects all assistants.