Skip to Content
Connect & ManageMCP Administration

MCP Administration

Set workspace MCP budgets, governance ceilings, and billing safeguards in Team settings → MCP. To connect ChatGPT, Claude, Gemini, or an IDE, see Connecting AI Apps & Editors.

At a glanceVerified in app · Oct 30, 2026
Use it to
Set daily Step credit and Glow AI token caps for MCP, pause billable MCP runs, and govern external MCP agent tool servers
Find it
Workspace menu → Team settings → MCP (?section=mcp) and Connections → Agent tools
Cost
MCP reads, authoring, and validation are free · MCP test runs and AI generation use workspace Step credits or Glow AI tokens
Limits
Up to 25 active MCP connections per user · Selected-automation allowlists cap at 100 automations · Daily caps reset at 00:00 UTC
Instead
Connecting AI Apps & Editors (for personal client setup and scoped token creation)
Inbound to GlowGlow as an MCP Server
  • ChatGPT, Claude, Gemini, and AI editors connect to Glow via OAuth 2.1 or personal tokens.
  • Admins set workspace ceilings, Live change policies, and daily caps in Team settings → MCP.
  • Tests and Assistant builds use shared workspace Step credits and Glow AI tokens.
Outbound from GlowGlow as an MCP Client
  • AI Agent Steps call external HTTPS MCP tool servers during automation runs.
  • Configured under Connections → Agent tools → Add external connection.
  • Governed by Admin tool catalogue approval and per-tool human review gates.

Set Up Workspace Access

Admins, Managers, and Members can open Team settings → MCP → My MCP connection to manage personal connections. Only a workspace Admin can change workspace governance and billing safeguards.

Open the workspace’s MCP settings

Open the workspace menu, choose Team settings, and select MCP.

Review usage and limits

Under MCP from your own tools, review the three cards showing today’s MCP usage and workspace balances.

Save the safeguards

Set workspace governance, Allow billable MCP runs in this workspace, and daily limits. Click Save changes.

Workspace Safeguards & Governance Ceilings

ControlWhat to Set
Pause all MCP in this workspaceBlock all MCP reads, writes, and tests (403 MCP_PAUSED) and hide the workspace from list_workspaces until resumed.
Maximum MCP permissionCap what any connection can do in this workspace (Read only, Build drafts, or Full access).
Allow Live changes / Require approvalUnder Full access, control whether connections may edit, publish, or pause Live automations, or Require approval for Live changes and test secrets.
Allow billable MCP runs in this workspaceAllow or refuse new billable MCP tests and Assistant builds without disconnecting clients.
Daily Step credits limitChoose No additional limit or Custom limit (whole-number daily cap on MCP Step credits).
Daily Glow AI tokens limitChoose No additional limit or Custom limit (whole-number daily cap on MCP Glow AI tokens).

Setting a custom limit to 0 blocks new billable work for that unit while free MCP operations (update_workflow, validate_workflow, save_workflow_version, and history reads) continue. Daily limits reset at 00:00 UTC ("Outstanding reservations keep counting after the reset"). Review changes under Settings history or click Discard changes.

Review Usage

MCP and the web app share the workspace’s Step credits and Glow AI tokens. Click View usage in Billing and usage for balance details.

0 Step Credits & 0 AI TokensFree MCP Operations
  • Workspace and catalog discovery (list_workspaces, list_workflows, search_components, get_step_context).
  • Direct canvas authoring and validation (create_workflow, update_workflow, validate_workflow, validate_step_config).
  • Run traces, history, and version checkpoints (get_workflow_execution, save_workflow_version, diff_workflow_versions).
Shared Workspace BalancesBillable MCP Operations
  • Single-Step and whole-automation tests in execute mode (test_step, run_workflow_test).
  • Legacy asynchronous Assistant builds (generate_workflow, chat_edit_workflow).
  • Trigger sample fetches, pinned Steps, and writeMode: "preview" cost 0 Step credits.

See billing response fields and test costs and effects. Tests perform real actions and can incur usage.

Review Token Permissions

OAuth grants and personal tokens (glow_mcp2_…) narrow existing workspace access and never elevate role permissions. Prefer Only {Workspace}. All my workspaces requires Admin access in every reachable workspace.

Permission LevelTools in tools/listGrants Included
Full access25 (26 with Manages Live)Read all automations and runs, build/edit drafts, run test_step and run_workflow_test on drafts and Live, and write Data Store test access by default.
Build drafts (Recommended)25 (22 on legacy no-test)Default for new tokens, OAuth sign-in, and Quick Connect. Read all automations, create/edit drafts, and test drafts (read Data Store test access).
Read only16Inspect automations, schemas, and run history without modifying or running anything (read Data Store test access).
  • Lifecycle & expiry: Keep up to 25 active OAuth app and glow_mcp2_… token connections per user, or click Pause all in Your account → MCP. Connections expire 90 days after creation or renewal, or after 30 idle days (with a 7-day email warning and Renew).
  • In-place controls (Change permissions): Update a connection’s preset, Data stores test level (None, Read, Write), workspace scope, or Limit to specific automations allowlist (100 automations max). Start a new chat afterwards so your client refreshes tools/list.
  • Secrets & Live edits: Toggle Allow tests to use workspace secrets (Tests use secrets badge) or Manage Live automations (Manages Live badge, Admin only). Editing or publishing a Live automation (update_workflow with allowActiveWorkflowMutation: true or set_workflow_status) requires Full access, Manage Live automations, workspace Allow Live changes, and Admin role. See Create a Scoped Token or Authorize an App.

Troubleshoot Workspace MCP

ProblemNext Action
MCP setup is unavailable in a workspacePersonal MCP setup and Team settings → MCP require an Admin, Manager, or Member role (Viewers cannot use MCP).
New billable work returns MCP_PAUSEDCheck Pause all MCP in this workspace and Allow billable MCP runs in this workspace in Team settings → MCP, or user Pause all.
Billable test returns MCP_ENFORCEMENT_UNAVAILABLENo run started or was charged. Verify workspace safeguards or use writeMode: "preview".
A token or permission check failsFollow client troubleshooting.
A test response is lostFollow Step recovery or whole-run recovery.

External Tools for AI Agents

Review Connections and Approval

Register external HTTPS MCP servers under Connections → Agent tools → Add external connection. Approve the tool catalogue and configure per-tool human approval gates.

The Agent tools tab on the Connections page for registering external MCP tool servers.
Register external MCP servers under Connections → Agent tools so AI Agents can use reviewed tools.

Developer Guide Shortcuts

Verify it works
Run
Open Team settings → MCP (?section=mcp) and set a daily Step credit or Glow AI token limit
You should see
The workspace cap is saved immediately and appears in Settings history.

What’s Next?

Last updated on

Search documentation

Start with a guide, or search by Step, task or error.