When you bind an MCP tool that accesses an external service (Google Calendar, Linear, GitHub, etc.), you'll be prompted to sign in to that service via OAuth. This grants Nuveki temporary access to act on your behalf. Your credentials are stored securely in the Credential Vault (accessible from Settings). You can revoke access at any time by removing the credential, which disconnects Nuveki from that service.