MCP
OAuth and scopes
Understand Retensis MCP authorization, token lifetime, PKCE, and available scopes.
LiveGrowth and above
In plain terms
This page is the technical detail behind the connection. In short: you sign in with a secure standard login, your assistant only gets the permissions it needs, and access expires and renews on its own. You never share your password, and you can remove access anytime in Retensis under Settings, Connected apps, which stops it at once. Removing the connector in your assistant stops the assistant from using it.
Scopes
| Scope | Allows |
|---|---|
| analyses:read | List, retrieve, and find similar owned analyses |
| analyses:write | Create uploads and start analyses |
| research:read | Run trend, gap, audience, and competitor research |
| creative:write | Generate hooks, titles, script coaching, and idea scores |
Token lifecycle
- Authorization codes expire after 60 seconds.
- Access tokens expire after one hour.
- Refresh tokens expire after 30 days.
- Refresh tokens rotate on use.
- Reusing a rotated refresh token revokes the entire refresh family.
Discovery
text
https://retensis.com/.well-known/oauth-authorization-server
https://retensis.com/.well-known/oauth-protected-resource