Skip to main content
Bridge Town

MCP · scopes

You decide what your AI client can touch.

The initial OAuth connection asks for all nine approved capabilities needed for the complete 78-tool experience. Review them together before you approve; Bridge Town does not present a reduced grant as a full connection.

/ what each permission means

Nine scopes, in plain English.

models:read

Read modelsRead model files, branches, versions, assumptions, and comparisons in workspaces your account can access.

models:write

Change modelsCreate, edit, merge, and delete model files, branches, and versions. These changes are recorded, but they can alter or remove workspace content.

runs:execute

Execute model codeStart and cancel model runs in Bridge Town isolated compute. Runs consume compute and write results and logs; model code has no open-internet access.

history:read

Read historyView model versions, run results, audit events, and commentary so changes and calculations can be reviewed.

data:read

Read connected dataRead uploaded files, connected data sources, and stored snapshots that are available to the workspace.

data:write

Manage connected dataConnect, upload, refresh, replace, and delete Bridge Town data sources and snapshots. This does not edit an original external source; Google Sheet edits use sheets:write.

sheets:read

Read sheetsRead Bridge Town native sheets and the Google Sheets you separately select and authorize with Google.

sheets:write

Change sheetsCreate, update, append, format, clear, and delete cells or rows in native sheets and authorized Google Sheets. These actions can overwrite external spreadsheet data.

sharing:manage

Manage sharingCreate, change, accept, and revoke model, collaborator, and dashboard sharing. This can make workspace content available to other people or link recipients.

/ how we handle access

Complete consent, bounded enforcement.

/ 01

Scopes never replace access control

Every tool still checks your workspace membership, role, model grants, and tenant boundary.

/ 02

Decline or revocation

Declining stops the connection. Disconnecting a client revokes its Bridge Town access.

/ 03

Reduced grants fail clearly

If host policy removes a scope, affected tools do not run and name the capability an administrator must allow.

Connect with confidence.

Read how Bridge Town processes MCP tool calls in our Privacy Policy and how your selected AI provider processes the conversation under your agreement with that provider.

Connect to Claude

Want the full picture? Security overview →