What an AI tool may do

Which rights a connected AI tool has, what it asks you first, what it cannot do and how to stop it.

Whether your AI tool works through the connector (https://mcp.cubli.io) or through the CLI (npx @cubli/cli mcp): the rules are the same.

In one workspace, as an admin

  • The tool only works in the workspace you choose when connecting.
  • It has at most the rights of an admin, and never more than you have yourself. If you are a viewer, the tool can only look too.
  • Everything the tool does shows in your project’s Activity. A version it made live is listed with the versions as “via AI (MCP)”.

What the tool can do

Area Example tools
Projects and sites list_projects, create_project, list_services, create_service, add_template, site_status
Deploys list_deployments, get_deployment, rollback, get_logs, and locally deploy
Staging create_staging, promote
Variables list_variables, set_variables
Databases create_database, connect_database, import_database
WordPress migrate_wordpress, migration_status
Domains and DNS add_domain, domain_status, set_primary_address, search_domains, dns_records, set_dns_record, move_domain_dns
Site offline or online set_site_online

Your tool shows exactly which tools it sees in its own list of MCP tools.

What the tool asks you first

  • A new project with a plan: the tool first gets the price and tells you. The plan only starts once you agree. That can happen at most 3 times a day, only if you are the owner, for a business workspace that pays automatically or on account. If you pay by invoice, choose the plan in the dashboard. If you pay automatically and delete the project within 3 days, it costs nothing.
  • Importing a database: everything in the database is replaced. The tool asks for your yes first.
  • Downloading your site’s data: a dump of the database or files holds your customers’ data. The tool asks you every time.
  • Taking your site offline: the tool asks you first.

What the tool cannot do

  • Order domains. Searching is fine; you order in the dashboard.
  • Manage members or tokens.
  • Billing and how you pay.
  • Delete the workspace.
  • Read secret variables. Mark a variable Secret and it is hidden from your AI too.

Take away access

  • Connector (Claude, ChatGPT): go to Settings, API tokens and click Disconnect under Connected AI tools. The tool can no longer do anything, at once.
  • CLI and local MCP: a CLI login is listed as a token under Settings, API tokens. Click Revoke there.
Was this helpful?

Stuck? Mail support@cubli.io, or ask from your dashboard: Help