How does MCP access work?
Automation · Updated Jun 22, 2026
Canopy exposes a read-only remote MCP server so agents can query maps, services, cost, and dependencies.
Connect an MCP-capable client to the Canopy MCP endpoint. OAuth is recommended when the client supports it, because users approve access in the browser and can revoke it later. Start with the MCP overview, then choose OAuth or token auth.
MCP tools are read-only: they list architecture, services, cost, and dependency blast radius, but none of them can modify your workspace. What a given connection may read is set by its scopes, and a connection can never exceed the workspace role of the person who approved it.
Related articles
Why won't my MCP client connect?
AutomationCheck whether your client supports remote MCP, confirm the server URL, then choose OAuth or token auth based on the client.
What should I do if I hit an API or AI limit?
AutomationWait for the reset window, reduce repeated requests, or get support if your workspace needs a higher operational ceiling.
Why is Canopy AI disabled?
AutomationCanopy AI is a Pro feature, but some dashboard AI surfaces may stay disabled while the feature is still being prepared.