Approving an MCP capability allows the agent to request that class of operation. It does not override the Institution account’s company access, role, plan checks, or workflow validation.
If a tool is denied despite a visible scope, check whether your account can perform the equivalent action in the relevant workspace. The operation may also depend on the record’s current state or an existing review requirement.
Do not repeatedly grant Full access as a way to bypass an unrelated permission restriction. Ask the authorized company administrator or support to identify the actual requirement.
The connector also has intentional boundaries. Actual payments, signatures, staff-only approvals, and provider authorization remain in their existing user workflows. An assistant can help prepare or inspect supported work without receiving authority to complete every final action. Use the tool’s current capability and workflow contract to distinguish a missing scope from a feature that requires a different authorized route.
Was this article helpful?
Tell us whether this answered the question you came with.