MCP Security & Privacy
Off by default, read-only first, local-only, revocable - exactly how AI access to your chats stays safe.
Giving an AI access to your chats sounds scary. It shouldn't be - the mssgs MCP was designed so you stay in control at every step.
The six guarantees
Off by default
Nothing runs until you switch on Enable local MCP server in Settings → MCP.
Read-only first
Sending messages is a separate switch. Until you flip it, the AI can only look.
Local only
The server binds to 127.0.0.1 - unreachable from the network or internet - with protection against DNS-rebinding tricks.
Granular permissions
Pick the exposed channels, then separate switches for sending, DM requests, all DMs, profile & story access, server management, moderation, watch parties, voice channels, your account settings and keeping the computer awake.
Revocable tokens
Tokens are named, per-tool, and revocable in one click - with a per-token activity sparkline so you can see exactly when each was used.
Only while you're there
The server runs only while the desktop app is open and you're signed in. Close the app, access ends.
Was this article helpful?
Didn’t find what you were looking for? We’re happy to help.
Ask your question