MCP and API

Everything you can do in Falcon, an AI assistant or your own code can do too, within your access.

What you do in Falcon is also available over MCP, the protocol AI assistants use to call tools. Every build checks that the two match.

An assistant acts as the person who connected it. It can only do what that person may do, and risky changes wait for their approval.

The same operations are available as an HTTP API. The API reference lists every operation, grouped by area, and marks the few that assistants cannot call, such as sign-in steps that need a browser.

Connect an AI assistant

In pilot

Connect an AI assistant to Falcon over MCP and sign in as yourself.

What you can do

Connect an assistant with a browser sign-in
See connected assistants and disconnect any of them

In Falcon: MCP · Connected assistants · Connect an app

In the API: authorizeMcpClient, reviewMcpConsent, listMcpConnections, revokeMcpConnection

Approve what an assistant asks to do

In pilot

When an assistant asks to do something risky, such as publish or send, it waits until you approve it in Falcon.

What you can do

Review a pending request with its details
Approve or cancel it

In Falcon: Approvals · Review an app’s request

In the API: getMcpPendingOperation, confirmMcpPendingOperation, cancelMcpPendingOperation

Company MCP policy

In pilot

Administrators decide whether people may connect assistants, and what those assistants may do.

What you can do

Allow or stop assistant connections
Limit what connected assistants may do

In Falcon: MCP

In the API: getCompanyMcpPolicy, updateCompanyMcpPolicy

HTTP API

In pilot

The same operations as MCP, over HTTP, each described with when to use it and who may call it.

What you can do

Read the API reference
Call operations as a signed-in person

In the API: getMe, getCompany

Reach an agent or workflow from AI assistants

In pilot

Give one agent or workflow its own MCP address, so people's AI assistants and automation tools can talk to it or start it.

What you can do

Switch an agent's MCP address on, and copy it into an AI assistant
Let anyone, signed-in people or only chosen clients connect
Give each identity the agent acts for its own address
Start a workflow with its start fields and read its result
Give a tool an access key, replace it, or disconnect any client
Add a workflow's MCP way in: its On switch turns the workflow's own address on and off, and the company MCP address lists only published workflows whose MCP way in is on
Run the MCP way in's steps on every call, so a Gate can refuse a call with a plain message
Decide with access tags which people, teams, access keys and apps may list and call which agents and workflows

In Falcon: Channel · Publish · Allow an app · Access tags

In the API: getAgentMcpEndpoint, updateAgentMcpEndpoint, rotateAgentMcpAddress, createAgentMcpKey, rotateAgentMcpKey, revokeAgentMcpClient, getPipelineMcpStart, updatePipelineMcpStart, rotatePipelineMcpAddress, createPipelineMcpKey, rotatePipelineMcpKey, revokePipelineMcpClient, reviewAgentMcpConsent, authorizeAgentMcpClient, getMcpAccessTags, updateMcpAccessTags

Falcon inside your own product

Coming next

Show parts of Falcon inside your own app, so your users can shape their agents there.

What you can do

Embed an agent's settings in your app

Who can do what

Who may do each thing in this guide, and what an AI assistant connected as that person may do with it. Roles are set in Company settings › Roles.

What	Who may	An assistant
Authorize an MCP connection	The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state.	Not offered to assistants
Review an MCP connection request	The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state.	Not offered to assistants
List your MCP connections	Anyone who can see it	Reads · needs “look”
Disconnect an MCP client	People who can edit it	Cannot be undone · needs “change settings” · waits for your approval
Read an MCP request awaiting review	The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state.	Not offered to assistants
Confirm an MCP request	The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state.	Not offered to assistants
Cancel an MCP request	The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state.	Not offered to assistants
Read MCP access policy	Company administrators	Reads · needs “look”
Change MCP access policy	Company administrators	Changes · needs “change settings” · waits for your approval
Get me	Anyone who can see it	Reads · needs “look”
Get company	Anyone who can see it	Reads · needs “look”
Read an agent's MCP address	Anyone who can see it	Reads · needs “look”
Change an agent's MCP address	People who can edit it	Changes · needs “change settings” · waits for your approval
Replace an agent's MCP address	People who can rotate secrets	Changes · needs “change settings” · waits for your approval
Give a client an access key	People who can edit it	Changes · needs “change settings” · waits for your approval
Replace a client's access key	People who can rotate secrets	Changes · needs “change settings” · waits for your approval
Disconnect a client	People who can edit it	Cannot be undone · needs “change settings” · waits for your approval
Read a workflow's MCP address	Anyone who can see it	Reads · needs “look”
Change a workflow's MCP address	People who can edit it	Changes · needs “change settings” · waits for your approval
Replace a workflow's MCP address	People who can rotate secrets	Changes · needs “change settings” · waits for your approval
Give a client an access key	People who can edit it	Changes · needs “change settings” · waits for your approval
Replace a client's access key	People who can rotate secrets	Changes · needs “change settings” · waits for your approval
Disconnect a client	People who can edit it	Cannot be undone · needs “change settings” · waits for your approval
Review a request to connect to an agent	The signed-in person in their own browser.	Not offered to assistants
Allow an app to talk to an agent as you	The signed-in person in their own browser.	Not offered to assistants
Read MCP access tags	Company administrators	Reads · needs “look”
Change MCP access tags	Company administrators	Changes · needs “change settings” · waits for your approval

Next: every feature