TLDR
A Project's knowledge splits into two mechanisms that behave differently: uploads are a static snapshot a user manually maintains, and connectors are live links to external systems (Google Drive, Gmail, Calendar) built on MCP. Claude Help Center: use-google-workspace-connectors Connectors are not one uniform capability - Gmail can only search, read, and draft (never send), while Calendar can create, update, and delete events outright, so the governance question is per-connector scope, not "is this connector on." Every connector action still requires the user's explicit approval before it executes - Calendar writes and deletes are not silent.
What it is
A Project's knowledge is whatever it draws on beyond the base model, and a business user configuring one is really doing two different jobs. The first is curating static knowledge: files uploaded directly, indexed and retrieved on demand, a snapshot that only changes when someone re-uploads it. The second is managing live connectors: links to external systems, Google Drive, Gmail, Google Calendar, and other apps through Anthropic's Connectors directory, built on the Model Context Protocol (MCP), that let Claude read current, real-time state rather than a snapshot from whenever it was uploaded.
Both feed the same conversation, but they fail differently. A stale upload gives a wrong answer until someone notices and re-uploads it, a predictable, self-contained failure. A connector's accuracy depends on two things at once: the connected account's actual current state, and the permission scope granted when it was enabled, an over-broad grant is a live, ongoing exposure, not a one-time mistake that surfaces once and gets fixed.
How it works
Uploads are the simpler half and are covered in depth on the Projects page, click "+" on the project's knowledge panel, upload a document, and Claude retrieves the relevant portion at query time via RAG once the knowledge base grows large, automatically, on every plan. See Study Next for the full mechanics; this page focuses on the connector half.
Connectors are discovered and enabled through Anthropic's Connectors directory, a one-click browsing experience at claude.ai's directory built on MCP, where a user clicks "Connect" to authenticate a remote service or "Install" for a desktop extension. Individually, a user toggles a connector on or off inside a chat via the "+" menu's Connectors option. For Team and Enterprise plans, an Owner or Primary Owner must first enable a connector at the organization level, under Organization settings, before individual members can use it at all, an individual employee cannot unilaterally enable an org-managed connector for themselves.
Per-connector capability is asymmetric, and the exam tests knowing the specific asymmetry, not just "connectors are live." The Gmail connector can search, read, and summarize email, and create drafts, but sending is disabled at the platform level: every email must still be sent manually from the actual Gmail account, and attachment content is unavailable, only metadata. The Google Calendar connector, by contrast, has real write power: it can create, update, and delete events, manage attendee lists, respond to invitations, and set up recurring meetings, deleting an event triggers an automatic cancellation notice to attendees. The Google Drive connector reads text content from supported file types (images embedded in documents are not processed) and, when code execution is enabled, can also save Claude-generated files back to Drive. Across every connector, Claude Help Center guidance is explicit: each action Claude takes on the user's behalf requires the user's explicit approval before it executes, this matters most for Calendar since creating, updating, and deleting events are real, externally visible actions, not just reads.
Governance runs on the same access-scoping principle regardless of which connector: Claude only accesses connected data when a specific question or action requires it, and retrieves the minimum information needed for that request, rather than pulling everything available up front. But scope still has to be set correctly at grant time, granting full mailbox access when only calendar visibility was needed is a governance gap even though it may work fine that day, the exam trap is treating "the connector exists and is enabled" as sufficient, when the actual objective is scoping and periodically reviewing what each connector was granted.

Where you'll see it
Q3 Vendor Review Project
Vendor contracts are uploaded as static project knowledge (retrieved by clause on demand), while the Gmail connector pulls the latest vendor correspondence live and the Drive connector references a shared scorecard spreadsheet that changes weekly, each source managed and revoked independently.
Scheduling assistant built on the Calendar connector
Creates, updates, and RSVPs to meetings on a user's behalf within that user's own existing calendar permissions, the two-gate model (org enables, user authenticates) bounds what it can touch even though Calendar's own capability includes real deletion.
Side-by-side
| Connector | Can read / search | Can create or modify | Can delete | What it explicitly cannot do |
|---|---|---|---|---|
| Gmail | Search and read email (metadata only for attachments) | Create drafts | No | Send email, no matter what's confirmed in chat |
| Google Calendar | View events and availability | Create, update, RSVP, set recurring meetings | Yes, with automatic cancellation notices | Nothing structurally, this is the most action-capable of the three |
| Google Drive | Read text content of supported files | Save Claude-generated files back to Drive (requires code execution enabled) | No | Process images embedded inside documents |
Decision tree
Does the underlying source change over time (a mailbox, a shared calendar, a live spreadsheet)?
Is this connector being enabled for a Team or Enterprise organization rather than an individual account?
Could this connector, once enabled, take a destructive or externally visible action (e.g. deleting an event, sending on someone's behalf)?
Was this connector's permission scope reviewed after it was first granted?
Question patterns

A user asks Claude, via the Gmail connector, to reply to a client email and send it. What actually happens?
"Claude sends the email automatically once the user confirms in chat" describes a capability the Gmail connector does not have, sending is disabled at the platform level, not gated behind a confirmation step.A scheduling assistant built on the Google Calendar connector is asked to cancel a recurring meeting series and notify all attendees. Can the connector do this, and does it happen automatically?
"Calendar connector, like Gmail, can only read or draft, not actually modify anything" incorrectly assumes uniform connector capability, Calendar and Gmail have genuinely different permission surfaces.An Enterprise org wants every department to have access to the Google Drive connector. What has to happen before any individual employee can use it?
"any individual employee can enable it for themselves without admin involvement" describes the individual-account flow, which does not apply once a connector is being rolled out org-wide on Team or Enterprise.Six months ago, an admin granted a connector full mailbox access when only calendar visibility was actually needed, and no one has revisited it since. What is the governance lesson this objective tests?
"once a connector is enabled it's a purely technical detail, not something governance needs to revisit" is exactly the assumption this objective is designed to catch, knowing a connector exists is not the same as knowing its scope is still appropriate.A PM needs Claude to reference a vendor scorecard spreadsheet in Google Drive that gets updated weekly by another team. Should they upload it once as project knowledge, or connect Drive live?
"upload the spreadsheet once as project knowledge since it's simpler to manage" optimizes for setup simplicity while accepting weekly-stale answers, the wrong tradeoff for data that changes on a schedule.Frequently asked
Can Claude send emails on my behalf through the Gmail connector?
Is a connector's data automatically more current than an upload, with nothing else to manage?
If Claude has Calendar connector access, can it delete or modify events without the user noticing?
Work this with your AI
Work this concept hands-on with Claude Code, Codex, or claude.ai. Copy a prompt, paste it into your assistant, and practise in tandem. Each one keeps you active (explain it back, get drilled, or build) rather than just reading.
- Drill it like the exam (scenario MCQs)Practice in the exam's scenario-MCQ format with trap awareness.
- Explain it back (Feynman)Build durable, transferable understanding of a concept you can half-state.
- Test me, adapting the difficultyActive recall practice on a concept you think you know.
- Check my prerequisites firstBefore studying a concept that keeps not sticking.
- Find the high-leverage 20%When a domain feels too big and you are short on time.
