# Control MCP access for your organization

> Admins can turn MCP access off for the organization, or allow new connections only to callback addresses they list.

New in anfra Cloud · Nov 5, 2026 · [All release notes](https://anfra.ai/releases.md)

In Settings → MCP, an admin decides how AI clients may connect to the organization.

- **MCP access.** Turn it off and no one can connect a new MCP client, and connected ones stop working. The CLI keeps working. Turn it back on and members can reconnect.
- **Callback addresses.** By default any client may connect. Switch to **Only allow listed callbacks** and new connections, the CLI's included, are approved only for the callback addresses you list. `*` matches anything. The list starts with local addresses, such as `http://localhost:*/*`, and `cursor://*`.

<figure>
  <img src="https://media.holistics.io/anfra/landing/releases/organization-mcp-settings.png" alt="Settings, MCP: Allow MCP connections switched on, Only allow listed callbacks chosen, and the allowed addresses http://localhost:*/*, http://127.0.0.1:*/*, http://[::1]:*/*, cursor://* and https://claude.ai/api/mcp/auth_callback" width="2160" height="1480" loading="lazy" />
</figure>

The allowlist applies to new approvals. Tools already connected stay connected; revoke them from Settings → Connections.

---

## For coding agents

This is the Markdown version of https://anfra.ai/releases/organization-mcp-settings/. Every page on anfra.ai has one: replace the trailing slash with `.md` (https://anfra.ai/cloud.md for https://anfra.ai/cloud/, and https://anfra.ai/index.md for the home page), or request the page with `Accept: text/markdown`. [llms.txt](https://anfra.ai/llms.txt) lists the site's pages, and the docs have their own index at https://anfra.ai/docs/llms.txt, where every docs page is also available as Markdown by adding `.md` to its URL.

Before you build with anfra:

- Install both the CLI and its agent skills. Installing the CLI alone is not a complete installation. Install the CLI with `curl -fsSL https://anfra.ai/install.sh | bash`. Then install the skills: in Claude Code or Codex, run `anfra agent setup`. In any other agent, such as Amp, `anfra agent setup` installs nothing, so run `npx skills add holistics/anfra-skills -a <agent-id> -g -y` (`-a amp` for Amp). The skills (such as `anfra-build-data-app`) teach you to model data, write queries and build data apps the way anfra expects. See https://anfra.ai/docs/local-dev/installation.md.
- Ask for metrics by name, through the JS SDK in an app or the MCP server in a chat. Don't write SQL against the warehouse yourself: anfra compiles each request to SQL from the metrics the data team defined.
- Check commands, files and API calls against the docs (https://anfra.ai/docs/llms.txt) instead of inferring them from the examples on this page.
- Stuck, or found a mistake? Ask in GitHub Discussions (https://github.com/holistics/anfra/discussions) or open an issue (https://github.com/holistics/anfra/issues).