Every external data source agents can read. Disconnect = one click, immediately revokes all agent access.