Scopes never replace access control
Every tool still checks your workspace membership, role, model grants, and tenant boundary.
MCP · scopes
The initial OAuth connection asks for all nine approved capabilities needed for the complete 78-tool experience. Review them together before you approve; Bridge Town does not present a reduced grant as a full connection.
/ what each permission means
Read modelsRead model files, branches, versions, assumptions, and comparisons in workspaces your account can access.
Change modelsCreate, edit, merge, and delete model files, branches, and versions. These changes are recorded, but they can alter or remove workspace content.
Execute model codeStart and cancel model runs in Bridge Town isolated compute. Runs consume compute and write results and logs; model code has no open-internet access.
Read historyView model versions, run results, audit events, and commentary so changes and calculations can be reviewed.
Read connected dataRead uploaded files, connected data sources, and stored snapshots that are available to the workspace.
Manage connected dataConnect, upload, refresh, replace, and delete Bridge Town data sources and snapshots. This does not edit an original external source; Google Sheet edits use sheets:write.
Read sheetsRead Bridge Town native sheets and the Google Sheets you separately select and authorize with Google.
Change sheetsCreate, update, append, format, clear, and delete cells or rows in native sheets and authorized Google Sheets. These actions can overwrite external spreadsheet data.
Manage sharingCreate, change, accept, and revoke model, collaborator, and dashboard sharing. This can make workspace content available to other people or link recipients.
/ how we handle access
Every tool still checks your workspace membership, role, model grants, and tenant boundary.
Declining stops the connection. Disconnecting a client revokes its Bridge Town access.
If host policy removes a scope, affected tools do not run and name the capability an administrator must allow.
Read how Bridge Town processes MCP tool calls in our Privacy Policy and how your selected AI provider processes the conversation under your agreement with that provider.
Connect to ClaudeWant the full picture? Security overview →