> ## Documentation Index > Fetch the complete documentation index at: https://docs.topcalls.ai/llms.txt > Use this file to discover all available pages before exploring further. # MCP security and limits > Read only or full access, what your role limits, what stops an AI app from spending too much, how connections end, and how the Topcalls MCP server is secured. ## Read only or full access? You choose when you allow access. With **Read only** on, the app sees only the 10 tools that read, and can't change anything in the account. It doesn't even see the tools that change things. With it off, the app can also save drafts, launch, pause, resume and cancel campaigns, place test calls, import leads and run your Integrations flows, each within what your role allows. To change a connection from one to the other, connect the app again. ## What stays under your control? * **Your Topcalls login.** The AI app never sees your password. You sign in on Topcalls and approve the connection there. * **One account per connection.** Each connection works on the one Topcalls account you chose when you approved it. * **Read only when you want it.** Turn it on when you connect, and the app can look at your data but can't change anything. * **Your role sets the limits.** Every tool checks your role in the account each time it runs. If your role can't launch a campaign in Topcalls, your AI app can't launch one either. * **Activity you can check.** Topcalls records which tool ran, what it acted on (a campaign, list, lead or call), how it ended, which app and member used it, how long it took and when. It never records the content that was sent or returned. * **End it any time.** End one connection, or all of them, in Topcalls settings. The app stops on its next request. A connection also ends after 30 days without use. ## What stops an AI app from spending too much credit? * Launching a campaign, resuming one, placing a test call and importing leads into a list that feeds a running campaign lead to real calls that use credit. * Topcalls refuses a launch when the Launch checklist in Topcalls is incomplete, when the campaign doesn't pass the safety review, or when the account has too little credit. * A test call goes only to a lead of the account or to the company's verified contact phone. No other number can be called. * Through MCP, a Topcalls account takes at most 10 campaign launches an hour and 30 a day; 20 test calls an hour and 100 a day, with 3 a day to the same lead; 20 campaign resumes an hour; and 10 lead imports an hour and 30 a day. Every AI app connected to the account counts toward the same limits. * Topcalls marks the tools that can't be undone, so AI apps like Claude and ChatGPT can ask you before they run one. See [Tools](https://docs.topcalls.ai/mcp/tools.md#which-tools-ask-me-to-confirm-first). * No tool changes prices, adds credit or changes billing settings. Calls your AI app starts use your credit like any other call. What they cost is on the [pricing page](https://www.topcalls.ai/pricing). ## How do I end a connection? **1. Open CLI & MCP** In Topcalls, open CLI & MCP in the Setup menu. Connections lists your connected AI apps. **2. End the connection** Select End connection next to the app. It stops on its next request. **3. Connect again later** To use the app again, connect it again from the app. A member sees and ends their own connections. The account owner sees every connection of the account and can select **End all connections**. ## How long does a connection last? A connection ends after 30 days without use, and after 180 days in any case. Connect the app again to continue. ## What happens when someone leaves the account? Every MCP tool call checks membership, so the AI app of a member who was removed stops working on its next request. ## Does the AI app get call recordings? No. The MCP tools return call summaries and transcripts, and say whether a recording exists, but never the recording itself. ## How is the Topcalls MCP server secured? * Sign-in uses OAuth with PKCE. Your AI app never sees your Topcalls password. * Access tokens last 10 minutes and work only on the Topcalls MCP server address. * Topcalls keeps only hashes of the tokens it issues. Refresh tokens change on every use, and a refresh token that comes back after its replacement was used ends the connection. * The sign-in result goes only to Claude, ChatGPT, Cursor, VS Code and apps running on your own computer. * Every tool call checks the connection, your membership and your role at that moment, so an ended connection or a removed member stops on the next request. * Text from your account, such as transcripts and lead notes, goes back to the app marked as data, not as instructions. ## Are there limits on how often an app can call the server? Topcalls turns away requests that arrive too fast. Requests turned away before a tool is checked, for example because the connection had ended or the app sent too many, are not listed in your activity. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.