Connector limits and audit
Token lifetimes, rate limits and how connector activity is audited.
Tokens
Access tokens live 15 minutes; refresh tokens 30 days and rotate on use (reuse revokes the family). Tokens are bound to one user and one firm.
Audit
Every tool call is written to the audit log with the acting user, the tool, the target and the request id, and shows in the case's message board as "via Claude".
Rate limits
Per user and per firm, enforced at the edge and in the application. Limits are stated in the service agreement [verify figures before launch].