MCP server

Administration & security

See and disconnect connected AI apps, switch off the MCP server – and what DDM does to protect your data.

Administrators keep an eye on which AI apps are connected, and can disconnect any of them or switch off the MCP server entirely.

Available from the Professional plan – see Plans.

How to switch on the MCP server is described under Setup.

Connected AI apps

Under Connected AI apps you see which apps are connected for whom. Disconnect takes an app's access away at once. The person can connect it again afterwards – as long as the server is switched on.

Each person also sees and disconnects their own apps under My account.

Switching off

If you switch off Enable MCP server, DDM stops all connected AI apps at once – none can read or change anything any more, and open suggestions can no longer be approved either. The connections themselves remain: switch it back on and they carry on working. To lock an app out for good, disconnect it.

What DDM does to protect you

Off until you want it. The MCP server is switched off until an administrator switches it on.
Only what the person sees. The AI has the same permissions as the signed-in person – categories, groups, markets, approval rules. Administration tools are only there for administrators.
No change without approval. Every change shows a preview and waits for the person – see Approving changes. The audit log records it as AI action carried out, with the app's name.
Short-lived access. The AI app gets no permanent key, but access that expires after 15 minutes and renews as long as the connection exists. Disconnected means disconnected at once: a disconnected app does not get back in with its old access.
Only you approve. A suggestion can only be approved by the person it was made for – not even administrators in their place, and never through an AI app itself.
Blocked means blocked. Blocked members and deactivated organisations are refused.
No access from outside. Platform operators have no access through the MCP server to organisations they are not members of.

What AI apps only read is not in the audit log – any more than reading in DDM itself. Disconnecting an app (AI app disconnected) and every carried-out or rejected change are recorded there.

Data protection

What the AI reads from DDM – titles, document texts, names – goes to the provider of the AI app the person has chosen. DDM has no influence on that.

Decide which AI apps are allowed in your organisation and state it in your data-protection rules. If none is allowed, leave the MCP server switched off.

Approving changes

The AI changes nothing without you – every change first shows what it does and waits for your approval.

Overview

Bring documents into the CMS automatically from SharePoint, OneDrive, Google Drive, an FTP server or your own interface – how to set up a source, what a sync does and what it never does.