› System › System settings › Utilities › MCP tool approvals

MCP tool approvals

MCP tool approval is the permission granted to an AI assistant to use a specific tool exposed by an MCP server. Users can approve a single request for the current session, or permanently, depending on the available approval options. Administrators can view and manage approvals from the “MCP tool approvals” page in System settings.

The MCP tool approvals page allows administrators to view and manage user approvals for tools exposed by configured MCP servers.

Administrators can filter approvals by MCP server and revoke a user's approval for a specific MCP tool or revoke all tool approvals for the user at once. This helps enforce governance policies and address user-level security concerns.

Procedure

  1. Navigate to System > System settings > Utilities > MCP tool approvals.

    The MCP tool approvals dialog box is displayed. The list of MCP servers including the users and tools associated with that server appears.

  2. By default, the MCP server list displays approvals for all MCP servers. You can filter the list by MCP servers and users. For example, selecting TotalAgility MCP server displays the LoanapplicationprocessMCP tool and the users who have approval for it.
  3. To further filter the list by user, in the Search user box, enter the user's name.

    The approval list is filtered to display matching users and their approved MCP tools. You can use MCP server and Search user together to narrow the results further.

    The MCP server filter is a drop-down filter, while Search user is used to search for a specific user within the displayed approvals.

  4. To revoke the approvals for tools, do the following: You can revoke all user approvals for all tools under an MCP server, revoke approvals for a specific tool, or revoke an individual user's approval for a specific tool. A confirmation message is displayed before the approval is revoked.

    • To revoke all user approvals for all tools under an MCP server, select for the MCP server.

    • To revoke approvals for a specific tool, select for the tool for that MCP server.

    • To revoke an individual user's approval for a specific tool, select for the user.

  5. Select Close.

MCP tool approval example

If the MCP server exposes tools such as VehicleloanInsurance, HouseLoanApplication and additional tools, user may choose to approve only VehicleloanInsurance. Only the tools that have been explicitly approved by the user can execute tasks or retrieve information from connected services. Therefore, configuring an MCP server and exposing tools through it does not automatically imply that a user has approved or granted access to all available tools.

Use the following procedure to give consent to a tool.
Procedure
  1. Configure the MCP servers in the Integration menu and add tools.
  2. Allow all tools or select specific tools as required.
  3. Configure the Generative AI chat control to use the MCP servers.

    At runtime, the Chat window appears.

  4. Give a prompt allowing the AI assistant to use a specific tool exposed by an MCP server on behalf of a user.

    The system displays a Tool Permission Required prompt.

  5. Select one of the following options:

    • Approve: Allows tool execution for the current request/operation. If needed, you must approve each time.

    • Approve for Session: Allows tool execution without reprompting for the current user session.

    • Approve Always: Creates persistent approval for that tool for the user. The user can subsequently use the tool without being prompted for approval each time.

      You can revoke approval for any tool set to Approve Always within the user profile in the Workspace.

    • Deny: Prevents tool execution.

    Once granted, the approval is linked to the specific user and tool. Users may revoke their tool approvals at any time through their profile page, while administrators can manage and revoke approvals from the MCP Tool Approvals page.