Turn it on

Connected apps (the feature the MCP server rides on) is off until an administrator turns it on. This page is for administrators.

Before you start

• Foldr Cloud: the Business and Enterprise plans include connected apps. If your plan does not, the page says “Connected apps are not included in your plan.”
• Appliance: no licence key is needed. The switch below is the only gate.
• You need the permission that opens Settings > Connected apps.

Turn it on

1. Open Settings > Connected apps.
2. On the Settings tab, switch on Allow connected apps.
3. Under Who may connect apps, add the people and groups who may connect an assistant to their own account. Nobody can connect one until they are listed. The permission is called Connect apps.
4. Decide about approval. With Approve each self-registered app before people can use it on, an AI assistant that registers itself waits on the Apps tab until you approve it. With it off, a self-registered app can be used at once. An app nobody approves within 30 days of registering is removed.
5. Check Token lifetimes. A connection lasts up to 90 days by default, and It ends after 30 days unused. When either runs out, the person connects the app again.

Each change saves as you make it.

Taking Connect apps away from a person pauses every app they have connected. Giving it back resumes them.

Where apps come from

An app appears on the Apps tab in one of two ways.

• It registers itself. Most AI assistants do this the first time someone connects them. The app shows as Self-registered, and shows as Waiting if approval is on. Click Approve to let people use it.
• You add it. Click Add an app, give it a name and its redirect URLs, and click Add app. Foldr shows a client ID and, if the app keeps one, a client secret. Copy both now: the client ID can be seen again by editing the app, but the secret can never be shown again. Do this for an assistant that asks you for a client ID instead of registering itself.

Decide what an app may change

A new app can read and search and change nothing: the Apps tab shows Read-only.

To let an app make changes, click Policy… on its row. The dialog is called What (app name) may change.

• Tick what it may do: files (create and change, never delete or move), custom fields, or sharing requests (an approver has to allow each one).
• Under Where it may make changes, choose Any share the person can write to or Only these shares and pick them.
• Set a Daily limit, which counts write calls per person per app per day (UTC), or choose No limit.

The policy is always bounded by the person: an app can only change what the person who connected it could change themselves. Narrowing a policy takes effect on the app’s next call, not when its token expires. The person also has to agree to each change scope when they connect the app.

The dialog also has a section called Changes that remove or replace. That section is for Foldr’s REST API. The MCP server offers no tool that removes, moves or replaces anything, whether or not you tick it.

Seeing and ending connections

The Connections tab lists every app a person has connected. See Sign-in and scopes for ending one.