Access & Permissions
How organization opt-in, member roles, approvals and security boundaries control access to Pliant MCP.
Pliant MCP acts as youPliant MCP does not have its own set of permissions. It acts as the member who connected it, and Pliant checks every call against that member's role.
| 🔛 Admins decide | 👤 Members stay members | ✋ You approve writes |
|---|---|---|
| MCP is off until an admin turns it on for the organization. | The agent can do what the member can do, never more. | Write tools ask for confirmation in most AI tools. |
For admins
Enable
Open Settings > Modules and activate the Pliant MCP tile. People in your organization can then connect their AI tool. Pliant MCP Pro is in early access: reach out to Pliant support to have its tile made visible on your Modules page.
Disable
Deactivate the module. Access stops for everyone immediately, across all connected AI tools. Conversation history already stored in an AI tool is not deleted.
Not yet possible
Enabling MCP for specific members only. It is on or off for the whole organization, and what each person can do follows their role.
For members
- Every tool call is checked against your Pliant role. An empty result can mean the data is outside your permissions, not that it does not exist.
- A team manager sees only data recorded against the teams they manage.
- You can choose which tools need your approval in your AI tool. Write tools prompt for confirmation before they run.
- You can disconnect at any time: My Account > Security and Devices > MCP Connections. See Disconnect Pliant MCP.
What each kind of tool does
| Kind | Examples |
|---|---|
| Read | Search transactions, view receipts, spend analysis |
| Coding | Comment, team, supplier, category, splits |
| Reference data | Suppliers, projects, VAT rates |
| Cards | Lock, limits, controls |
| Members and teams | Invite, create teams, budgets |
What you can use depends on your role in Pliant. If your role does not allow an action, Pliant refuses it and the agent tells you.
Rate limits
Calls are limited per connected member. Write actions have an additional, tighter limit. If you hit a limit, wait a moment and try again.
Security boundaries
What Pliant MCP never doesIt never moves money, issues or terminates cards, or returns full card numbers, CVV or PIN.
- No money movement, top-ups or payments.
- No issuing, replacing or terminating cards.
- No permission elevation: you never get more access through an agent.
- Full card numbers, CVV and PIN are never returned.
- Changes appear in your organization's activity history, and every call is logged.
- Data you read goes to your AI tool and its model provider. Pliant also sees what is written through MCP.
What comes next?
Updated about 19 hours ago