> ## Documentation Index > Fetch the complete documentation index at: https://docs.getthread.com/llms.txt > Use this file to discover all available pages before exploring further. # Control who can connect AI apps to Thread MCP > Choose which members can connect ChatGPT, Claude, Cursor and other AI apps to Thread MCP, see every connected app, and revoke access from Thread Admin. > [!TIP] > > Availability: generally available to all partners. Members connect AI apps such as ChatGPT, Claude and Cursor to Thread by signing in with their Thread account. Each app acts with that member's own permissions. Workspace admins can decide who is allowed to connect at all, see every app that's connected, and cut off any app with one click. Prerequisites: * You are a **workspace admin** to change who can connect. **Team admins** can open the page, see the apps connected by members on their teams, and revoke them, but they can't change the setting. * The **MCP keys** tab is available on AI Pro. On AI Essentials, the page shows the **Connected apps** tab only, and connected apps can read but not make changes. ## Open the Thread MCP page 1. Open **Admin → Thread MCP**. 2. Select the **Connected apps** tab. The page replaces the old **MCP keys** page. Old links to the keys page redirect to the **MCP keys** tab here. You can also get to it from **Super Magic settings** with **Manage Thread MCP access**. The **Connected apps** tab has two parts: * **Access**: who can connect apps, plus the connector URL with a **Copy** button. * **Connected apps**: every AI app a member has connected, including apps that have never made a call. ![Thread MCP page in Thread Admin with the Access card, the connector URL, and a table of connected apps with a Revoke button on each row](https://mintcdn.com/thread/YBLoECs6_OZEurua/images/super-magic/thread-mcp/connected-apps-overview.png?fit=max\&auto=format\&n=YBLoECs6_OZEurua\&q=85\&s=6b0d517031e9e6a5703ec8fd2ebe61c7) The Connected apps tab: who can connect, the connector URL, and every connected app. ## Choose who can connect apps 1. Next to **Who can connect apps**, select **Edit**. 2. Pick one option: ![Who can connect apps drawer with the dropdown open, showing All members, Only admins, Custom and Off for everyone](https://mintcdn.com/thread/YBLoECs6_OZEurua/images/super-magic/thread-mcp/who-can-connect-options.png?fit=max\&auto=format\&n=YBLoECs6_OZEurua\&q=85\&s=3964a3b45118bf1ba12cc1a5310246c2) Choose who can connect apps. | Option | Who can connect | | - | - | | **All members** | Every active member. This is the default, so nothing changes until you pick something else. | | **Only admins** | Workspace admins only. Team admins are not included. | | **Custom** | Only the members you add. Search by name or email to add someone, or select **Remove** next to a name. | | **Off for everyone** | Nobody, admins included. This is the same as **Custom** with nobody added. | 3. Select **Save**. ![Who can connect apps drawer set to Only admins, with a warning that 2 members will lose access and the apps they use](https://mintcdn.com/thread/YBLoECs6_OZEurua/images/super-magic/thread-mcp/only-admins-warning.png?fit=max\&auto=format\&n=YBLoECs6_OZEurua\&q=85\&s=0f0034419cfed1c0fe40b916e71dbf47) If a change would cut someone off, Thread lists who will lose access before you save. ![Who can connect apps drawer set to Custom, with the list of members who will lose access and a search box to add members](https://mintcdn.com/thread/YBLoECs6_OZEurua/images/super-magic/thread-mcp/custom-member-picker.png?fit=max\&auto=format\&n=YBLoECs6_OZEurua\&q=85\&s=cd2a7bac48f68cf76ec94d289ef499be) With Custom, add the members who can connect. The warning updates as you choose. > [!WARNING] > > Saving a tighter setting takes effect right away. If the change would cut off members who have connected apps or MCP automation keys, Thread lists them with their apps and keys, and asks you to confirm with **Revoke access**. Their apps are disconnected, their MCP automation keys are revoked, and they can't reconnect unless you include them again. What happens after you save: * Apps connected by members who are no longer allowed stop working right away. Thread checks access on every call, so an app that is already connected stops on its next request. * They can't connect a new app, and nobody can create an MCP automation key for them, including an admin. * In Inbox, under **Magic → Connectors**, they see **Connecting AI apps is turned off for your account** instead of the connector URL. * Loosening the setting later doesn't bring anything back. Revoked apps stay revoked, so members connect again and admins issue new keys. ## Review connected apps The **Connected apps** table lists one row per member and app: | Column | What it shows | | - | - | | **Member** | The member who connected the app, and their role. | | **App** | The AI app, for example ChatGPT or Claude. | | **Connected** | When the member first connected the app. | | **Last used** | The last call in the past 30 days. **Never** means no calls in the last 30 days. | | **Calls (30D)** | Calls in the last 30 days. Rejected calls aren't counted. | Workspace admins see every connection in the workspace. Team admins see connections for members on their teams. ## Revoke an app 1. Find the member and app in the **Connected apps** table. 2. Select **Revoke**, then confirm. ![Connected apps table with the pointer over the Revoke button on one row](https://mintcdn.com/thread/YBLoECs6_OZEurua/images/super-magic/thread-mcp/revoke-connected-app.png?fit=max\&auto=format\&n=YBLoECs6_OZEurua\&q=85\&s=dfe18d579e0cf5d0d38a7e3d4e76f4bb) Revoke disconnects one app immediately. The app is disconnected immediately and the row stays in the table marked **Revoked**. Revoking ends that one app's sign-in. It doesn't block the member: if they're still allowed to connect, they can sign in again. To keep someone out, change **Who can connect apps** so they're no longer included. Team admins can revoke apps for members on their teams, but not apps connected by workspace admins or other team admins. Members can also disconnect their own apps from Inbox: **Magic → Connectors → Your connected apps → Disconnect**. ## MCP automation keys follow the same setting Automation keys for n8n, CI and scripts live on the **MCP keys** tab of the same page. Keys follow the **Who can connect apps** setting: when a member loses access, their keys are revoked along with their apps, including keys an admin issued for them. See [Issue MCP automation keys for team members](https://docs.getthread.com/super-magic/issue-mcp-automation-keys-for-team-members.md). ![MCP keys tab with a table of automation keys showing name, member, masked token, last used and status](https://mintcdn.com/thread/YBLoECs6_OZEurua/images/super-magic/thread-mcp/mcp-keys-tab.png?fit=max\&auto=format\&n=YBLoECs6_OZEurua\&q=85\&s=83bd82ced488cea6df7de466c0219470) The MCP keys tab. Token values are masked. ## Things this setting doesn't change * **What a connected app can do.** An app can only see and do what its member can in Thread. To limit what members can do, use write access and tool toggles in Super Magic settings, and Access Groups to limit which clients they see. See [Super Magic Admin Guide: Setup, Access & Safety](https://docs.getthread.com/super-magic/super-magic-admin-guide-setup-access-safety.md). * **Super Magic in Inbox.** Turning Super Magic off doesn't block Thread MCP, and this setting doesn't affect Super Magic chat. ## FAQ **Do members need to reconnect after I restrict access?** Members who are still allowed keep working with no change. Members who lost access are disconnected and can't reconnect until you include them again. Then they connect again from their AI app. **Why does Last used say Never for an app I know was used?** Last used only looks back 30 days. **Never** means the app made no calls in that window. **Does Only admins include team admins?** No. Only admins means workspace admins. Use **Custom** to add team admins who need access. ## Related topics - [Thread MCP Server: Developer Guide](https://docs.getthread.com/super-magic/thread-mcp-server-developer-guide.md) - [Super Magic Admin Guide: Setup, Access & Safety](https://docs.getthread.com/super-magic/super-magic-admin-guide-setup-access-safety.md) - [Issue MCP automation keys for team members](https://docs.getthread.com/super-magic/issue-mcp-automation-keys-for-team-members.md)