Access and safety
When you connect, you choose one of three levels. An app can never do more than you can in the workspace.
Access levels
| Level | What the app may do |
|---|---|
| Read | See your guidance, analytics and survey results. |
| Create and edit drafts | Also create, edit and delete drafts. Nothing goes live. |
| Edit and publish | Also publish, unpublish, roll back and approve review requests. |
Each level is also capped by your own role. A contributor who connects at "Edit and publish" still can't publish.
Guardrails
- Everything an agent creates or edits is a draft. Your users see nothing until it's published.
- If your workspace requires approval, the agent can't skip it: it sends a review request, and a publisher approves it in Approvals.
- Account administration (team, roles, billing, security, API keys) is never available to a connected app.
- Every tool call is in the audit log with the app's name.
- See or disconnect your apps in Settings → Integrations → Connected apps. Removing someone from the workspace disconnects their apps.
Agents are told to show you a preview and wait for your go-ahead before publishing. The access level is what enforces it: connect at "Create and edit drafts" if you want to publish yourself.
AI agents (MCP)
Connect Claude, ChatGPT, Cursor or VS Code to your workspace. The agent builds guidance, checks it against your real product, shows you a preview and publishes when you say so.
Tools
Every tool the Cueston MCP server offers, grouped by step of the work, with the access level each needs.