# Not Organic integration

Start: https://docs.notorganic.info/integrate
Apply: https://id.notorganic.info/?view=integrations&product=notorganic

Not Organic connects portable ATProto/PDS accounts, workspaces and scoped AI services. Production third-party apps require review and an explicit origin mapping. A pending application does not enable access.

Browser helper: download https://docs.notorganic.info/notorganic-sign-in.js and host with the app. createSignInRequest({clientId: location.origin, redirectUri: new URL('/auth/notorganic', location.origin).href, scopes: ['wallet:read']}) returns an attempt with URL, verifier, state and expiry. Store the attempt in sessionStorage before navigation. On callback consume the stored attempt once, retain the callback URL locally, remove callback parameters from browser history, then call completeSignIn(attempt, callbackUrl). It returns a proof-bound BrowserClient. Catch failures and offer a new attempt.

Credentials remain in memory and access lasts five minutes. This starter does not implement persistent refresh. See the authentication guide for device sessions. Ordinary cross-origin account links do not sign a user into an application. Never embed provider or product signing secrets.

Public MCP: https://id.notorganic.info/mcp, Streamable HTTP. This MCP exposes public guidance only, not account data or administrative mutations.