Team Access Controls: Private Chats and Per-Member MCP Access
When a whole team works in one Cogny workspace, not everyone needs everything. An agency may want a junior analyst to read Google Analytics without being able to touch an ad budget. A founder may want their own chats with Cogny to stay their own.
Workspace owners now have two settings for that, under Settings → Access & privacy.
Private chats
By default every member of a workspace sees every chat. Turn on Private chats and each chat is visible only to the member who started it, including to owners and admins. Scheduled reports and loop runs belong to the workspace, so they stay visible to everyone.
Per-member MCP access
By default every member can use every integration the workspace has connected, subject to each integration's own tool permissions. Switch MCP access to Only what each member is granted, and each member gets exactly what you grant them, per connection:
- No access: the integration doesn't exist for them.
- All tools: everything on that integration.
- Selected tools: only the tools you tick, for example read-only reporting tools on Google Ads and nothing that changes a budget.
The restriction follows the member everywhere they can reach an integration:
- Cogny's own chat: a tool they weren't granted is never offered to the agent, and is refused if called.
- Tickets and automations: a run uses the grants of the member who started or scheduled it, so scheduling a job can't widen anyone's access.
- Voice calls: only the connections they were granted.
- Their own AI client over MCP (Claude, ChatGPT, Cursor): the tool list their agent sees is cut to their grants.
Owners and admins always keep full access, since they manage the connections. A workspace API key, which only an owner or admin can create, is not restricted either.
Who can change it
Only the workspace owner can change these settings. Admins can see them, and members can see their own grants. Both settings are off by default, so nothing changes for a workspace until the owner turns them on.
Access & privacy is part of Cloud, the plan for teams. See pricing or the buying guide for what each plan includes.