What you need to know before connecting a repository
How you sign in, what Tick-it and its GitHub App can do, and where your data lives.
Signing in
Sign in with GitHub, grant only the scopes you want
There is no password and no token to copy. Each scope can be left unticked; a tool that needs it then refuses and says why.
| Scope | Lets an agent |
|---|---|
tickets:read | Read tickets, epics, plans, comments and memory |
tickets:write | Create and change tickets, plans, comments and settings |
runs:write | Report a session's runs, so their time and cost are recorded |
costs:read | Read costs |
offline_access | Stay signed in without asking again |
The GitHub App
Reads pull requests, checks and contents. It writes only to post before and after pictures, and to merge or leave drafts when you turn those on.
Routine tokens
The token for your claude.ai routine is encrypted before it is stored, and is never shown again.
Connected apps
See every app you've signed in to Tick-it from, and revoke any of them, or all, at any time.
Where data lives
Tick-it runs on Cloudflare Workers, with its data in Cloudflare D1 and attachments in R2.
Leaving
An owner can remove a repository from Tick-it at any time. GitHub is untouched.