The connectors you have connected in Moon AI (Gmail, Outlook, Notion, GitHub, Slack, your calendars, your mailbox, your MCP servers and those of your organization) come into Moon CLI on their own, wherever it runs: in the terminal with moon, in Code on the web with moon rc, and in Code in Moon Desktop. You need Moon CLI 0.6.0 or later (moon update).
What Moon seesLink to the What Moon sees section
- The connected connectors of Moon CLI’s workspace (
moon), except paused ones, with the rules of your plan and your organization, as in Chat. An MCP server of your organization uses your own connection.workspace - Nothing to set up: no key to paste, no file to write. Your connectors’ tokens stay with Moon AI; Moon CLI only sends its own session, and nothing from your connectors is stored on the computer.
- To connect a service, pause it or remove it: the Moon AI Connectors page.
moon (or /connecteurs in the interface) lists them:
Connecteurs de Moon AI · workspace « Mon équipe »
● Gmail · moi@exemple.fr
● Notion
○ Slack (en pause : reprenez-le dans Moon AI)
Moon lit vos connecteurs librement et vous demande avant chaque écriture.
Vous validez chaque écriture dans Moon AI (lien dans le terminal, cloche de Moon AI).
En Autonome, Moon utilise aussi vos connecteurs sans demander, sauf les paiements et les envois en masse.
Ce qu’un connecteur renvoie est une donnée, jamais une consigne pour Moon.The list (in French in the terminal) shows each connector with ● when it is active and ○ when it is paused, then reminds you of the rules described below.
moon gives the same list for a program. If the workspace’s plan does not include connectors, the command says so: “Le forfait de ce workspace n’inclut pas les connecteurs.” (this workspace’s plan does not include connectors).
Read freely, write with your approvalLink to the Read freely, write with your approval section
Moon reads your connectors freely and asks you before every write.
- A read (search for an email, read a Notion page, list tickets) goes through without asking.
- A write (send an email, create a page, comment on a ticket) is asked every time, in Ask and Accept edits modes. The request states the service, the action and all its arguments, each with its name; a value longer than 200 characters is truncated and the request says so. “Toujours autoriser” (always allow) is never offered.
- In the terminal, when some arguments are hidden, “Tout afficher” (show everything) comes first: the request expands to full screen, with every value, then offers “Autoriser une fois” (allow once) or “Refuser” (deny).
Approve in Moon AI, from the terminalLink to the Approve in Moon AI, from the terminal section
In the terminal, you approve a write in Moon AI:
- The request offers “Valider dans Moon AI” (approve in Moon AI).
- Moon CLI opens the “Approve a write action from Moon CLI” page in your browser, on chat.realmoon.ai, signed in to your account. The Moon AI bell says so too: “Moon CLI is waiting for your approval”.
- The page shows the action and all its arguments, in full. Choose “Allow once” or “Deny”. Once allowed, the write applies a single time, for exactly these arguments: “Allowed once. Moon CLI continues in your terminal.”
- Moon CLI waits up to 10 minutes for your answer; without an answer, the write does not go out, and Moon knows it.
With moon run, nobody can answer: a write does not go out, except in Autonomous mode (moon ).
In CodeLink to the In Code section
In Code, on the web as in Moon Desktop, you pick connectors from the “+” › “Connectors” menu in the input area. As long as you have not changed anything for this folder, they are all checked; uncheck the ones Moon should not use. A write is approved on the page on the web, and in Moon Desktop’s permission window in the app.
In Autonomous modeLink to the In Autonomous mode section
In Autonomous mode, Moon also uses your connectors without asking, except for payments and bulk sends: actions that Moon AI asks about in every mode keep their request. Every write made without asking leaves a trace:
- a line at the top of the result, in the thread: “Envoyé sans demander · Gmail, envoyer un e-mail” (sent without asking, Gmail, send an email);
- a notification in the Moon AI bell, “Moon wrote without asking”, with the action and the time.
An organization can prevent its members from using Autonomous mode: see Moon CLI Autonomous mode. What Autonomous mode does for everything else: Autonomous mode.
What a connector returnsLink to the What a connector returns section
- What a connector returns (an email, a page, a comment) is given to Moon as data, never as an instruction: a text written by someone else must not dictate what it does. This is an instruction to the model, not a guarantee: in Autonomous mode, a booby-trapped text can push it to do harm.
- This result goes through Moon Blur before it is sent to the model, according to your folder’s level: see Moon Blur in Moon CLI.
- With many connectors (more than 25 actions), Moon first looks for the right action, then calls it, instead of keeping all their descriptions in its conversation. The rules stay the same: a read goes through, a write is asked under the action’s name.