Permissions and safety
Every connection is an approval you give, inside one workspace, for the permissions you choose. It can be removed at any time.
Permissions
Section titled “Permissions”| Permission | What the app can do | Minimum role |
|---|---|---|
| See social accounts | List connected social accounts and their status | Viewer |
| Read posts | Drafts, scheduled, published and failed posts with their captions | Viewer |
| Create draft posts | Save new drafts for review. It cannot schedule or publish | Operator |
| Read campaigns | Always-on campaigns, their settings and schedule | Viewer |
| Read results | Post counts by status and what content works for each account | Viewer |
| Read workflows | Automation workflows and their steps | Operator |
Marketing permissions also need the member’s Marketing access. The approval screen greys out anything your role does not allow.
What an app can never do
Section titled “What an app can never do”- Schedule, publish or delete posts.
- Run, turn on or turn off workflows.
- See another workspace, even one you belong to.
- See your password or reuse an API key.
Your role is checked on every request
Section titled “Your role is checked on every request”If your role changes, your Marketing access is removed, or you leave the workspace, the app loses that access on its very next request. Tokens also expire on their own and are renewed only while you remain a member.
See what an app did
Section titled “See what an app did”Open Settings → Connections → AI assistants (MCP) and select Activity next to an app. Each action shows the tool, whether it worked, and when. Drafts created by an app are also recorded in the workspace audit log.
Disconnect an app
Section titled “Disconnect an app”In Settings → AI assistants (MCP), select Disconnect next to the app. It loses access immediately and every token it holds stops working. Owners and admins see and can disconnect every connection in the workspace; other members see their own.