You can now control every tool an MCP connector exposes — set each one to allow, ask for approval, or deny — directly from the connector settings panel.

How it works

When you open an MCP connector's settings, you'll see every tool the server advertises, grouped by read and write operations. Each tool has a dropdown: allow (runs without asking), ask (your agent pauses and requests your approval at runtime), or deny (the tool is unavailable). Defaults are sensible — read tools default to allow, write tools default to ask — and you can change them at any time.

Why it matters

With nearly 300 connectors in the catalog, most of them MCP, a simple on/off switch is not enough. Tool-level permissions let you give your agents exactly the access they need — reading your calendar but not creating events, searching your documents but not deleting them — without blocking entire connectors.