Strapi AI Connector
Connecting an AI assistant to your website means giving something a way in, and you should know exactly what that is before you do it. On Strapi it is one credential, it belongs to you, and you can take it back at any moment without touching anything else on the site.
What Strapi asks for
An API token created under Settings → API Tokens, scoped to only the collections you want reachable. Never an admin token: that one is the whole administrator's interface, and this product deliberately asks for the smaller of the two.
Taking it back
Revoking is immediate and it is yours to do: the credential is removed on your own Strapi site, not requested from us. The next action the assistant attempts fails, the connection reports itself as broken, and nothing else on your website changes. There is no notice period and nothing to cancel first.
What the assistant can and cannot see
The assistant never receives your credential. It asks this connector for an action; the connector checks the action against what you authorised and then uses the credential itself. The credential is encrypted at rest and tied to the single website it was given for, so a copy of it taken from anywhere else is of no use.
What the platform does not allow
Strapi will not tell an API token what collections a site has, and it shows only what that token was allowed to see — so a short list is not evidence of a small site. This product never reports an empty answer as an empty site: it tells you when something is there and out of reach, and names the permission to tick.
Everything above describes what Strapi’s interface offers. None of it is marked verified yet, which in this product means exercised against a live installation with the date recorded.
Common questions
Do I give an AI company my Strapi password?
No, and not to us either in the usual sense. Strapi issues a separate credential for this, you create it yourself, and it is encrypted the moment it reaches us. Your login password is not involved and is never asked for.
What happens if I revoke it?
The connection stops working and nothing else does. Content already created stays exactly as it is — it is ordinary Strapi content, not something held by us. You can issue a new credential later and carry on.
Can one credential reach more than one website?
No. Each credential is bound to the one website it was created for, so a licence for one Strapi site cannot quietly be used on another — and a credential that leaked could not be either.
Getting started with Strapi AI Agent
Strapi AI Agent is not on sale yet. The product page tracks where it stands, and nothing is advertised before it works.