Agent Client Permissions
Every MCP client that connected to your account, what it was allowed to read, and how often it has called. Changes apply to future tool calls — past activity stays in the audit timeline.
Abuse alerts
Raised when one client accumulates 5+ blocked calls within 300s. The MCP guard records the same alert server-side.
No repeated denials or rate limits in the current window.
Rate limits
Thresholds are applied per agent client before any scope check. Client rows override the account default; the account default overrides the built-in values.
Sign in to tune rate limits.
Denied and rate-limited calls count toward the window, so retry storms stay blocked.
Connected clients
Consent grants stored per client for your account
Sign in to view agent client grants. Grants are created when you approve an MCP client on the consent screen.
Revoking sets the client's approved scopes to none. Existing sessions are not deleted, but every subsequent tool call is denied and recorded under the AGENT category in the audit timeline.