Managing AI Connectors and MCP Access

 

Who can use this feature
gray-cloud.svg Available on all plans. Managing AI Connector and MCP settings requires admin permissions.

MCP (Model Context Protocol) is the gateway that lets AI agents like Claude, ChatGPT, Cursor, Microsoft Copilot, and many others securely connect to your monday.com account data. MCP comes preinstalled with every monday.com account. To turn it on or off, or to restrict where it operates, account admins manage it through the Admin panel.

Use this article to learn how to:

  • Enable or disable AI connectors and MCP access
  • Restrict MCP to specific workspaces
  • Understand what happens at the account level when MCP is enabled
  • Identify common errors that appear when access is turned off

 

Who can manage these settings?

Only account admins can change MCP and AI connector permissions. If you need access changed, reach out to your admin.

 

Enable or disable AI Connectors

Where to find it

1Open the Admin panel by clicking your profile picture, then select Administration.

2Click AI governance in the left sidebar. Then in the dropdown, click on AI permissions.

3Scroll to the AI Connectors section.

 

What you'll see

The master toggle is Allow external AI agents to access your monday.com account data. When expanded, you will find several AI connectors and the general hosted MCP option.

Public Hosted MCP controls access for every other AI agent and tool that connects via MCP, including Claude, ChatGPT, Cursor, Codex, Gemini CLI, GitHub Copilot, Glean, Lovable, n8n, Notion, Perplexity, Replit, TypingMind, Warp, Windsurf, and many more.

 

To turn AI Connectors and MCP off entirely

Uncheck Allow external AI agents to access your monday.com account data. This disables all sub-permissions at once. No external AI agent using a monday connector or hosted MCP will be able to access your account data, regardless of individual authorization.

 

To allow only specific types of agents

Keep the master toggle on and check only the sub-permissions you want. For example, to allow Microsoft Copilot but block other AI agents from accessing your monday data through MCP, leave the two Microsoft options checked and uncheck Public Hosted MCP.

 

Restrict MCP to specific workspaces

By default, when MCP is enabled it works across all workspaces in your account. If you want to limit it, for example to keep sensitive workspaces excluded, you can scope it down.

Where to find it

1Open the Admin panel.

2Go to Apps.

3Find monday MCP in the list and open its Permissions.

4Under App management, under Installed on your monday.com account for:, choose one of the following:

  • All Workspaces: MCP is available across every current and future workspace (default)
  • Specific Workspaces: Select one or more workspaces from the dropdown. MCP will only operate on the workspaces you choose.

5Click Save.

 

Tip: Use Specific Workspaces when you want to allow MCP broadly but protect particular projects, teams, or sensitive data from being accessed by AI agents.

What happens at the account level when MCP is enabled

Enabling AI Connectors at the account level does not automatically expose your data. Several safeguards stay in place:

  • Authorization is required per connection. Every time someone connects their monday.com account from an AI agent (Claude, ChatGPT, and so on), they go through an explicit authorization flow.
  • Access is limited to existing permissions. MCP respects every existing permission in your account: board permissions, item-level permissions, private boards, and so on. An AI agent acting on someone's behalf can never see more than that person can see in the monday.com interface.
  • No shared or elevated access. There is no service account or shared key. Every connection is tied to an individual's personal access scope.
Note: For a full breakdown of how monday.com's MCP handles security, see the MCP Security Overview.

 

Errors that appear when access is disabled

If an admin has disabled AI Connectors or restricted the workspace scope and someone tries to connect or query monday.com from an AI agent, they will see an error in the agent itself.

 

If you are seeing one of these errors, contact your monday.com account admin and ask them to check Admin → Permissions → AI Connectors and, if relevant, the workspace scope under Admin → Apps → monday MCP.

 

FAQs

Do I need to install the monday MCP app from the marketplace?

No. MCP comes preinstalled on every monday.com account. The marketplace listing exists for discoverability and documentation, but no installation step is required.

If I disable Public Hosted MCP, will it also turn off Microsoft Copilot?

No. Microsoft Copilot and Copilot Studio are controlled by their own separate toggles. Public Hosted MCP only affects other AI agents connecting through the monday hosted MCP.

Can someone bypass the admin's AI Connector settings?

No. Account-level permissions take precedence. Even if someone attempts to connect from an AI agent, the connection will fail if MCP is disabled at the admin level.

Does enabling MCP let AI agents see private boards?

Only if the person authorizing the connection has access to those boards. MCP never escalates existing permissions.

 

If you have any questions, please reach out to our team right here. We’re available 24/7 and happy to help.

Last modified on

Still have questions?
We can help.

Chat support

Get in touch with our support team through our chat for any questions, concerns, or inquiries.

Community forum

Learn, share ideas and connect with other monday.com customers.

Expert help

Hire a monday.com expert to optimize your workflows.

Is this article helpful?
Help us improve our articles.