Skip to main content

Manage MCP server access for your team

Admins control who on the team can use the freispace MCP server. Team members connect using OAuth from their MCP client; admins do not need to distribute API keys or secrets. See Adding freispace to your LLM.

The MCP server uses the signed-in user's freispace account and permissions to determine which data they can access.

Setting user permissions​

  1. From the team menu in the top right corner, click on your team name and select Team members.
  2. Click Edit role of the role you want to manage.
  3. At the very bottom of the permissions list, locate External apps and enable or disable Allow access through external apps as needed.

This allows users to connect to the MCP server using OAuth.

Managing OAuth Sessions​

  1. From the team menu in the top right corner, click on your team name and select Team settings.
  2. Switch to the Integrations tab.
  3. In the left menu, go to OAuth Sessions.

You can see a list of all active OAuth sessions for your team members. Disable individual sessions as needed to revoke access immediately.

When access is disabled, the user can no longer use the MCP server. They can connect again if they have permission to connect through external apps and complete the OAuth flow in their MCP client.

Next steps​

Once access is enabled, the user can follow the Adding freispace to your LLM guide to connect their AI tool with OAuth.