Connect your tools (MCP)

    MCP security and permissions

    How sign-in, access and approvals work when you connect an assistant app.

    ·1 min read

    Security and permissions

    • You sign in as yourself. The connection uses a standard OAuth sign-in and consent screen. No passwords or keys are shared with the assistant app.
    • Same access as the app. The assistant only sees sites and workspaces your account can access, with your role's permissions.
    • Approvals still apply. Content, social, Google Business and Ads work created over MCP arrives as drafts. Nothing sends or publishes without a person approving it.
    • Revoke anytime. Disconnect the connector in your assistant app to end access immediately.
    • What the assistant app sees. Tool results you request are shared with that app under its own privacy terms. Only connect apps your team is allowed to use.