Every connector's operations normalized into one catalog. Connecting one grants no agent access until you grant it.