> ## Documentation Index
> Fetch the complete documentation index at: https://visaflo.ca/knowledge-base/llms.txt
> Use this file to discover all available pages before exploring further.

# How the AI assistant (MCP) connection works, what it can read, and how to revoke access

> How VisaFlo's Model Context Protocol connection lets an AI assistant read your workspace, what it can and cannot access, how firm data stays isolated, and how to disconnect.

## What is the AI assistant connection?

VisaFlo runs a Model Context Protocol (MCP) server at `https://mcp.vflo.app`. Connecting it to Claude, ChatGPT, or another MCP-compatible assistant lets that assistant answer questions about your VisaFlo workspace in natural language. See [Connect an AI assistant](/knowledge-base/knowledge-base/guide/connect-an-ai-assistant) for setup steps.

## Is it read-only? Can the assistant change my data?

The connection is **read-only**. A connected assistant can look up and summarize your data, but it cannot create, edit, or delete records, move a case, upload a file, or send anything on your behalf. To make changes, use the dashboard.

## MCP Server

Scoped to your workspace, the assistant can read:

* **Cases** — list, search, and open cases, plus case statistics.
* **Clients** — list, search, and open client records.
* **Leads** — list and open leads, plus lead statistics.
* **Tasks and reminders** — list tasks and reminders.
* **Case files** — list and search files, and get a download link for a file.
* **Questionnaire and form answers** — read and search a case's form answers.
* **Briefs** — read a generated case brief or client brief.
* **Emails and comments** — list and read emails and case form comments.
* **Invoices** — list and open invoices, plus invoice statistics.

It sees only what your own account is allowed to see, because you authorize the connection with your own login.

## Is my firm's data isolated from other firms?

Yes. Every request is scoped to the workspace that authorized the connection. An assistant connected to your firm cannot read another firm's cases, clients, or files.

## How do I authorize a connection?

When you add the VisaFlo MCP server in your assistant, VisaFlo opens a sign-in page and then a consent screen. You log in with your normal dashboard email and password and review the access before selecting **Allow**. No API key is created for this connection.

## How do I revoke access?

Open **Settings → Connected apps** in the dashboard and revoke the connection. The assistant loses access immediately. Revoke any connection that no longer has a business purpose.

## Can an administrator turn this off for the whole firm?

Yes. An administrator can disable the AI assistant connection for every member of the firm. When it is disabled, new connections cannot be authorized and existing ones stop returning data.

## Which assistants can I connect?

Any MCP-compatible assistant, including Claude Desktop and ChatGPT. The server URL `https://mcp.vflo.app` is the same for every assistant and every firm.

## Related

* [Connect an AI assistant](/knowledge-base/knowledge-base/guide/connect-an-ai-assistant)
* [Which integrations VisaFlo supports and what can be automated with APIs](/knowledge-base/knowledge-base/faq/which-integrations-visaflo-supports-and-what-can-be-automated-with-apis)