# Limits and access

> Rate, size and content limits, who can connect, and how to disconnect.

## Credits

Scans through an agent spend **the same credits** as scans in the app, on the same meter. When credits run out, scanning stops and your agent tells you; reading past scans keeps working.

A scan's cost is not quoted before or after. Your balance and plan are readable; the usage meter is the record.

## Throughput

Scans start at up to **10 per minute**, the same on every paid plan. **Each file and each web address counts as one scan**, so a ten-file call is ten scans against the minute.

<Note>
  Going over the scan ceiling does not fail anything - work waits, and your agent continues on its own. **Scans run concurrently, not one after another**, so pointing your client at a set of documents works the way you would expect.
</Note>

Other requests can be rate-limited. A refusal says how long to wait and your agent honours it; the wait is short and clears on its own.

## Access

**Paid app access is the gate.** Subscription, prepaid, or organization-paid all reach it.

<Warning>
  **No access on Free or lapsed accounts**, not even read-only. If your plan ends, the connector stops working with your other paid features; your scans and reports stay in your account, and reactivating restores access.
</Warning>

**One person, one connection.** A team is several individual connections, never a shared one - no admin view of a colleague's scans, no cross-member visibility, no team-level profiles.

**Each client you connect is its own connection**, with its own approval. Adding a second does not affect the first, and removing one leaves the others working.

Anything shared *with* you stays in Copyleaks. Your own scans only.

## Retention

A scan past its retention window can no longer be read, and the connector reports it as unavailable. **The window belongs to the scan itself, not to your current plan.**

## Where your content goes

Results you ask for are sent to your client and processed by the company that provides it - Anthropic, OpenAI, Google, or whoever makes the client you connected. That is true of anything you put into an AI agent, and it is worth knowing before you connect one.

Scan settings apply exactly as in the app. To keep emails, phone numbers and card numbers out of your results, turn on `Mask Personal Data` in your scan profile.

## What the connector cannot do

| | |
|---|---|
| Buy credits or change your plan | Billing stays in Copyleaks |
| Delete anything | No scans, results, or profiles |
| Return the document you scanned | Results are the flagged parts. The report is where the document lives |
| Download a report | Report downloads stay in the app |
| Create share links | Publishing stays a deliberate act in the app |
| Open a scan shared with you | Your own scans only |
| Compare two documents against each other | Scan them together with `Cross-check documents` on; matches come back as `This Batch` |
| Run scheduled or recurring scans | Set those up in Copyleaks. Scheduling your own client to run on a timer still spends credits per scan, like any other |
| Scan a folder as a unit | Name the files |

## Disconnecting

Remove the connection **in your client**, where you added it. Access ends immediately; nothing is deleted.

<Warning>
  **There is no connected-clients list in Copyleaks** - the connection lives on the client's side, so that is where it has to be removed. If you have lost access to the client itself, contact Copyleaks support.
</Warning>

| Client | How |
|---|---|
| **Claude Code** | `claude mcp logout copyleaks_app` then `claude mcp remove copyleaks_app` |
| **Claude Desktop / claude.ai** | **Settings → Connectors**, find Copyleaks, remove it |
| **Codex CLI** | `codex mcp remove copyleaks_app`, or delete the `[mcp_servers.copyleaks_app]` block |
| **Gemini CLI · Antigravity · Cursor · VS Code** | Delete the `copyleaks_app` entry from the config file, then restart |
| **`mcp-remote` bridge** | Delete the entry, **then remove the cached token from `~/.mcp-auth`** - the bridge stores its own, and deleting the config alone leaves it live |
