When you Allow, the assistant can receive four permissions. In a person’s words:
- Manage rules. Create, preview, switch on (by sending you a Heldrey link), undo, and delete rules and Calendar Syncs.
- Change settings. The modules, locations, calendars, timezone, internal domains, and pause or resume.
- Read activity. What happened and why, and items that need your attention.
- Account status. Plan, connection, and starting an upgrade or Google authorization in the browser.
If the client omits a choice, Heldrey grants all four. A reconnect only widens a grant. There is no way to narrow one except Disconnect.
Your MCP page
In Heldrey the rail label is MCP & AI (https://app.heldrey.com/assistants).
Connected assistants show the date, last use, one tag per permission, and Disconnect. Disconnect takes effect immediately. Its access tokens are revoked right away. Rules it created stay yours.
Recent activity lists the tool name, the client, OK or the error, and the time. Arguments and results are never stored.
Reconnect from the client to start again.
How long a connection lasts
It stays connected while it is used. Unused for 90 days, you must allow it again.
The email you get
When an assistant connects, Heldrey emails you by default. The subject is An assistant connected to your Heldrey. The body names the assistant and the permissions. If it was not you, disconnect it under MCP in Heldrey. There is no disconnect email.