MCP Access
Turn AI assistant access on or off, set each role's highest access, and manage connected apps.
Settings → MCP Access controls how AI assistants connect to Questify through the Questify MCP server. It appears to people with the ExternalApiClients.Manage permission (Super Admin by default).
Access
- Allow MCP clients: the main switch. When it is off, no app can connect, and turning it off disconnects every connected app on its next request.
- Allow dynamic client registration: lets older clients that don’t publish a metadata document register themselves. Their names show as Unverified app name on the sign-in page.
- Client metadata hosts: the hosts allowed to publish an app’s identity, one per line. Use
*.example.comfor subdomains. Leave it empty to allow any host. Changes affect new connections only.
Highest access per role
For each role, choose the most an app may be given when someone in that role connects it:
| Option | Access |
|---|---|
| Read only | Read |
| Read & write | Read and Write |
| Everything, incl. delete | Read, Write and Delete & admin |
Someone with several roles gets the highest of their roles. By default, Super Admin, Admin and King get Everything, incl. delete, and the other roles Read & write. A role that isn’t listed gets Read only.
Click Save to apply your changes.
Connected apps (all users)
Every app connected by anyone: the user, the app, its access and when it was last used. Disconnect one to end its access at once.
Connected clients
Every kind of app that has connected, with its type, client ID, number of active connections and status. Block a client to revoke all its connections and stop it from connecting again. Unblock lets it connect again, but doesn’t restore connections: each person has to connect again.