Manage MCP connections

View, revoke, or block connections that AI tools have made to the hosted PubNub Model Context Protocol (MCP) server through OAuth.

Hosted server only

This guide applies to the hosted MCP server at https://mcp.pubnub.com. The locally installed server authenticates with a PubNub API key and has no OAuth connection to view or revoke here.

Before you start

Confirm you have:

• A PubNub account with at least one hosted MCP connection to manage.
• An Account Owner or Account Admin role if you want to change organization-wide MCP access. Any member can view and revoke their own connections. For the full list of roles and permissions, see Admin Portal roles.

View active connections

1. Log in to Admin Portal.
2. Select your email address in the top-right corner to open the account menu.
3. Select Profile settings.
4. Open the MCP Connections tab.

The list shows each connection's organization, MCP client, client ID, and creation time.

Revoke a connection

1. Open Profile settings → MCP Connections.
2. Find the connection you want to remove.
3. Select Remove, then confirm.

The client loses access to your PubNub account immediately. To use it again, sign in from your AI tool the same way you set it up. See Set up the MCP server.

Control MCP access for an organization

Account Owners and Account Admins only

Only these roles can change organization-wide MCP access.

1. Log in to Admin Portal.
2. Select your email address in the top-right corner to open the account menu.
3. Select Organization settings.
4. Find MCP Connection Access.
5. Turn Allow MCP connections for all clients on or off.

Turning this off:

• Rejects existing hosted OAuth connections for the organization.
• Blocks new OAuth authorizations against it.
• Removes the organization from the list offered during OAuth account selection.

It has no effect on locally installed servers, since those authenticate with an API key instead of an OAuth connection to this organization.

Next steps

• Set up the MCP server. Connect an AI tool to the hosted or local server.
• MCP server. What data the server can access and how OAuth connections inherit your permissions.
• Find audit events. Confirm who revoked a connection or changed organization MCP access, and when.