Security
How agent actions are audited and what agents can and cannot access
Audit log
Every write an agent makes — and certain sensitive reads — is recorded in your organization's audit log. The entry's actor type is mcp and the client name (the name the OAuth client registered) is included so you can tell which AI tool performed the action.
Actions that always produce an audit entry regardless of caller type include all create, update, and delete operations. Sensitive reads that also produce entries are: exporting tests, reading email messages, and reading the audit log itself.
You can review agent activity in Organization → Audit Log.
Permissions
Agents operate under the account that granted access. They are subject to the same role-based permissions as that user — an agent connected to a Member account cannot do anything a Member cannot do. The permission check is identical to the check applied to direct API calls.
Secret values are never returned
The secrets_get and secrets_list tools return the secret's name, description, and version number only. The value stored in AWS Secrets Manager is never included in any tool response.
Similarly, webhook signing secrets and API key values are never returned by any MCP tool.
Revoking access
You can revoke an API key at any time using the api-keys_delete tool or from Organization → API Keys in the console. Requests using a revoked key receive a 401 immediately.
MCP OAuth tokens are issued per client, tied to your account, and expire after 30 days. Every call checks your current organization membership and role, so removing a member from the organization, or lowering their role, takes effect on the agent's next request. To stop a single client, remove the SmoothDeploy server from that client's configuration.
What agents cannot do
Agents cannot invite or remove members, change member roles, create API keys, create or rotate webhook secrets, or change organization or profile settings. These actions are restricted to direct user sessions regardless of the connected account's role. See What agents cannot do on the overview page.