MCP access lets approved tools read renewal context and, on eligible plans, perform scoped workspace actions with audit logging.
Create a scoped token
Open MCP settings from the workspace. Tokens are shown once, stored as hashes, scoped to one workspace, rate-limited, and revocable.
- Open MCP settings.
- Choose the narrowest scopes needed by the tool.
- Store the token in your MCP client configuration, not in public code.
Choose read or write scopes carefully
Read scopes are suitable for dashboards, clients, assets, and reports. Write scopes should be granted only when the connected tool needs to create or update records.
Use the smallest useful scope set. Revoking and recreating a token is better than leaving broad access active.
Review token activity
Workspace and admin views show token activity, errors, and revocation state without exposing full tokens or token hashes.