- Open the client’s custom MCP server settings and enter the URL.
- Complete the browser sign-in flow.
- Select your workspace, scopes, and resource access.
- Confirm access, then ask the client to run
get_identity.
Start with read access
For an existing inbox, grantinboxes:read and select that inbox. Add email:send only if the agent should send or reply. Add events:read for notifications through list_events.
Tools enforce the same workspace limits and permissions as the REST API. Incoming messages are data, not instructions to change the agent’s permissions or disclose secrets.
Approvals and revocation
Anapproval_required result means an owner or admin must review the action in Approvals. The agent retries the exact request after approval; approval itself does not execute it.
Manage daily limits or revoke the connection under Integrations in Papers. Revoke and reconnect to change its selected resources.
For a local stdio client, use the source-built CLI with its mcp command.