Domain 3Skills, Plugins & Connectors
OAuth Authentication
TL;DR
The secure, one-time browser-based flow used to connect external services.
Definition
The secure, one-time browser-based flow used to connect external services. You authenticate directly with Google, Slack, or Salesforce — never through Claude. The resulting access token gives Claude scoped permission until you revoke it. Claude never sees or stores your password.
Exam Context
Questions test the OAuth flow mechanics. Know that installation and authentication are separate steps, that tokens are scoped (not universal), and that permissions are revocable.