Permissions & access
Typillar acts on your behalf in two accounts you own — Cloudflare and GitHub — so it’s worth being precise about what that access is, what it’s used for, and how to withdraw it. This page is the reference for all of that.
How access is granted
Section titled “How access is granted”You grant access through each provider’s own OAuth flow:
- You approve the connection on Cloudflare’s and GitHub’s screens, not inside Typillar.
- Typillar receives a revocable token, never your password.
- You can withdraw the grant at any time, from either side.
What each connection allows
Section titled “What each connection allows”Cloudflare
Section titled “Cloudflare”Used to build and run your product on your account: deploy Workers, create the resources a feature needs (D1 databases, Durable Objects, scheduled triggers), publish live URLs, and — if you choose — run inference on Workers AI. Everything created is in your account and visible in your Cloudflare dashboard. See Connect Cloudflare.
GitHub
Section titled “GitHub”Used to commit generated code to a repository you choose and maintain its history. Point it at a single repository or a dedicated organization to keep the grant tightly scoped. See Connect GitHub.
The trust boundary
Section titled “The trust boundary”The simplest way to reason about Typillar’s access is the ownership split:
- Typillar’s control plane coordinates work.
- Your infrastructure executes and stores it.
Typillar does not host your product, store your application data, or run your inference — so its access exists to act on your resources, not to copy them into ours. See What you own.
Fail-closed by design
Section titled “Fail-closed by design”Operator access to Typillar’s own back-office is gated and fails closed — if the gate can’t positively verify an authorized operator, it serves nothing. The default everywhere is “deny unless explicitly allowed,” not the reverse.
How to revoke access
Section titled “How to revoke access”You can revoke at any time, and from either end:
| Connection | Revoke from Typillar | Revoke from the provider |
|---|---|---|
| Cloudflare | Disconnect in the console | Remove the app in Cloudflare settings |
| GitHub | Disconnect in the console | Remove the app in GitHub settings |
Revoking stops further changes immediately. Anything already deployed keeps running — it lives in your account, so disconnecting Typillar never tears your product down.