> ## Documentation Index
> Fetch the complete documentation index at: https://developers.pleo.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Access & Permissions

> How company opt-in, user permissions, tool tiers, and security boundaries govern access to the Pleo MCP.

export const RememberCallout = ({title, children, icon = "🪢"}) => <div style={{
  backgroundColor: 'var(--recommended-bg)',
  borderLeft: '4px solid #f63b92',
  borderRadius: '10px',
  padding: '18px 22px',
  marginBottom: '20px',
  boxShadow: '1px 1px 3px rgba(0,0,0,0.06)'
}}>
    <div style={{
  display: 'flex',
  alignItems: 'flex-start',
  gap: '14px'
}}>
      <span style={{
  fontSize: '22px',
  lineHeight: '1',
  flexShrink: 0
}}>
        {icon}
      </span>
      <div>
        {title && <div style={{
  fontSize: '16px',
  fontWeight: 600,
  color: 'var(--recommended-title)',
  marginBottom: '6px'
}}>
            {title}
          </div>}
        <div style={{
  fontSize: '14px',
  lineHeight: 1.65
}}>
          {children}
        </div>
      </div>
    </div>
  </div>;

The Pleo MCP uses a layered permission model. Company admins control whether users can connect to the Pleo MCP. What AI agents can access through the MCP is then governed by each user's existing Pleo permissions and their configuration of their AI client.

## For Admins

### Enabling MCP Access

MCP access is **off by default**. An admin must enable it before any user in the organisation can connect an AI client.

**To enable MCP access:**

1. Go to **Settings → General → Pleo AI** in the Pleo settings
2. Under the **MCP** section, enable **Pleo MCP access**

<RememberCallout title="Remember">
  MCP access is configured per entity in Pleo. If your organisation has multiple entities, enable it separately for each entity you want to use with MCP.
</RememberCallout>

### Disabling MCP Access

Admins can disable MCP access for the entire organisation by turning off the toggle in **Settings → General → Pleo AI**.

### Staging Environment

The staging MCP server mirrors the production permission model. MCP access must also be enabled per entity in your staging Pleo account before connecting.

See [How to Install the Pleo MCP as a Custom MCP: Using Staging](/docs/current/pleo-mcp/how-tos/installation/custom-mcp#using-staging) for setup steps.

## For Users

### User Permission Model

The MCP server does not grant any new permissions. An agent acting on behalf of a user can only do what that user can already do in the Pleo product.

* A spender can read and update their own expenses
* An agent cannot access data the connecting user cannot see in the Pleo app

Users can configure what tools require user approval within their AI client. Write tools that require approval will prompt the user to confirm the intended change before the tool executes.

### Working Across Multiple Entities

If you have access to more than one Pleo entity, the agent can work in any of them without you reconnecting or re-authorising.

* **Each request targets one entity at a time.** There is no "all entities at once" mode. The agent cannot combine data from two entities within a single request.
* **Your default entity is used unless you say otherwise.** This is the entity you connected during setup. To work in a different one, name it in your request, for example "show my expenses in Beta Ltd".
* **Naming the entity is not sticky.** If you want to stay in a non-default entity across several requests, keep referring to it, or tell the agent to keep working in that entity.
* **Each entity needs its own admin opt-in.** An entity where MCP access hasn't been enabled is not available to the agent, even if you have access to it in the Pleo app.

Your permissions are resolved per entity. If you are an owner in one entity and a spender in another, the agent can only do what your role in that specific entity allows.

### Revoking Your Access

Users can disconnect their own AI client's MCP access. See [How to Revoke Access to the Pleo MCP](/docs/current/pleo-mcp/how-tos/uninstallation/revoke-access) for the full steps.

## Audit Trail

Any action taken or data updated in Pleo are recorded in Pleo's activity and audit logs. The actions are visible in the Activity tab for the relevant expense.

## Security Boundaries

* **No payment actions.** The MCP does not support wallet top-ups, reimbursement payouts, invoice payments, or any autonomous payment decisions. SCA and regulatory controls remain intact.
* **No permission elevation.** An agent cannot access data or take actions beyond the connected user's existing Pleo permissions.

***

## What Comes Next?

* [Pleo MCP Enablement: Choose Your AI Platform](/docs/current/pleo-mcp/how-tos/enablement/overview#choose-your-ai-platform)
* [Install the Pleo MCP: Choose Your AI Tool](/docs/current/pleo-mcp/how-tos/installation/overview#choose-your-ai-tool)

***

## Related Reading

* [FAQs](/docs/current/pleo-mcp/get-started/faq)

***