Signing in
How the OAuth sign-in works, how long it lasts, and how to disconnect.
The server uses OAuth, so you never paste a key into your client. Sign-in happens once per client.
The first time
- Ask your assistant something that needs prices. Your client finds that the server needs a sign-in and opens a browser window at
chat.cognitolabs.ai. - Sign in, or create an account if you don't have one. Setting a password takes a 6-digit code we email you.
- The page asks whether to connect CognitoLabs to your AI client. It names the client and the address it will return to, and shows the account it will read as. Choose Allow, or Deny to cancel.
- You land on a You're connected page, or go straight back to your client, depending on the client. Go back and ask your question.
Desktop clients such as Claude Code show the You're connected page. It lists a few example questions and a link back to these docs. Hosted clients such as Claude and ChatGPT send you straight back to the app.
How long it lasts
Your client gets an access token that works for 2 hours, and a refresh token it uses to get a new one without asking you again. Refresh tokens last 30 days and are replaced each time they are used, so a client you use every few weeks stays connected.
Clients register themselves with us the first time they connect. That registration expires after 90 days, and the client simply registers again. You may be asked to allow it again.
Disconnecting
Remove the server in your client: delete the connector in Claude, ChatGPT or Copilot Studio, or run claude mcp remove cognitolabs in Claude Code. The client stops using its tokens and forgets them.
Removing the server in your client deletes its tokens there. A copy the client already sent elsewhere keeps working until it expires: 2 hours for an access token, up to 30 days for a refresh token.