# MCP connections

The **MCP Connections** page lists the active connections agents have established with MCP servers through OAuth, and lets admins revoke a connection to immediately cut off access. Open it from **Organization settings > Identity > MCP Connections** in the dashboard.

<Callout type="info">
  This feature is in preview.
</Callout>

## Access requirements

<Callout type="info">
  Viewing the page requires the `org:read` scope, so both the Admin and Member default roles can see connections. Revoking a connection requires the `project:write` scope, which only the [Admin default role](/docs/ai-control-plane/org-admin/roles-and-permissions) holds.
</Callout>

## Connections table

Each row represents a single OAuth connection between an agent and an MCP server. The table shows these columns:

- **Subject**: the user or identity the connection was established for
- **OAuth Client**: the client application that initiated the connection
- **MCP server**: the server the connection targets
- **Status**: whether the connection is Active, Expired, or Revoked
- **Expires**: when the connection expires

## Filtering and search

A project selector scopes the list to a single project. Additional filters narrow results by **Status** (Active, Expired, or Revoked), by **MCP server** (grouped by issuer), and by **User** (the connection subject). The search field matches against the subject, OAuth client, and MCP server of each connection.

## Revoking connections

Select one or more rows using the checkboxes, or use the select-all checkbox in the header to select every visible connection. With rows selected, click **Revoke** to open a confirmation dialog. Confirming revokes the selected connections and cuts off access immediately.