> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sourcebot.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Tool permissions

Tool permissions control which of a connector's tools agents can use, in both Ask Sourcebot and MCP clients. Owners set them once for the whole workspace, and they apply to every member.

Each tool is either:

* **Allowed**: agents can use it.
* **Blocked**: agents can't see or call it.

Every tool starts as **Allowed** when Sourcebot first sees it, including tools that create, change, or delete data. Review each connector's tools after you add it, and block the ones you don't want agents to use.

## Edit tool permissions

1. Go to **Settings → Workspace → Connectors**.
2. Open the connector's menu and select **Edit tool permissions**.
3. Use the toggle next to each tool to set it to **Allowed** or **Blocked**.

![Tool permissions for the Atlassian connector, with read-only and write/delete tools grouped separately](https://mintcdn.com/sourcebot/4jRqIKFzMtH-0zb0/images/connectors_tool_permissions.png?fit=max\&auto=format\&n=4jRqIKFzMtH-0zb0\&q=85\&s=8e81ea728d87c261d01e719d681b6192)

Changing a tool's permission doesn't require members to reconnect.

## When changes take effect

Changes reach agents at different times, depending on where they run:

| | Blocking a tool | Allowing a tool |
| - | - | - |
| **Ask Sourcebot** | From its next response | From its next response |
| **MCP clients** | Right away, including clients that are already connected | Within a few seconds, for [clients that support tool list updates](https://docs.sourcebot.dev/docs/mcp/tools/connectors.md). Other clients after they reconnect. |

Sourcebot checks permissions on every MCP client call, so a blocked tool stops working right away, even in a client that still lists it.

> [!TIP]
>
> To keep a whole connector out of MCP clients while Ask Sourcebot can still use it, disable the connector in **Settings → Workspace → MCP Gateway**. See [MCP Gateway](https://docs.sourcebot.dev/docs/mcp/gateway.md).

## Next steps

> [card] [Connect a connector](https://docs.sourcebot.dev/docs/features/connectors/connect-your-account.md)
>
> Share with members how they connect their own accounts.

> [card] [MCP Gateway](https://docs.sourcebot.dev/docs/mcp/gateway.md)
>
> Turn connectors on or off for MCP clients.

> [card] [Ask Sourcebot](https://docs.sourcebot.dev/docs/features/ask/connectors.md)
>
> Use connectors in your chats.

> [card] [Audit logs](https://docs.sourcebot.dev/docs/configuration/audit-logs.md)
>
> Review who changed a connector's tool permissions.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.