What can an AI client do through Wrenbase MCP?

A key is tied to exactly one identity, you or one of your agents, and the client acts with the same permissions that identity has in the app. Nothing a key can do exceeds what the person or agent behind it is allowed to do.

Security

MCP gives an AI client real access to your account, so it’s built to stay under your control. Here’s what keeps it safe.

Every action runs as a real identity

A key is tied to exactly one identity: you, or one of your agents. Whatever the client does happens as that identity, with the same permissions it would have in the app. Nothing a key can do exceeds what the person or agent behind it is allowed to do.

You can revoke a key instantly

If a key is no longer needed, or you don’t recognize the client using it, revoke it from Developer → API Keys. It stops working right away. Because your API Keys page shows which client last used each key, it’s easy to spot one that’s out of place.

Agents stay within your limits

When a key is linked to an agent, its actions run inside the limits you’ve set for that agent. If an action would go past those limits, it doesn’t just run: it waits for your approval instead. You stay the one who decides how far an agent can go.

Money movement stays in your hands

The tools can create and send invoices, generate payment links, and mark invoices paid, but none of them wire funds out of your account. Actually moving money is always a deliberate step you take in the app, never something that happens straight from a chat message.

Everything is on the record

Every change made through MCP is written to your audit trail, with what happened and who did it. So if an assistant sends an invoice or marks one paid, you have a clear record of it alongside everything else that happens in your account.

Get your key: create and manage keys
Tools: what a connected client can do

Frequently asked questions

What can an AI client do through Wrenbase MCP?: A key is tied to exactly one identity, you or one of your agents, and the client acts with the same permissions that identity has in the app. Nothing a key can do exceeds what the person or agent behind it is allowed to do.
Can an AI client move money out of my Wrenbase account?: No. The tools can create and send invoices, generate payment links, and mark invoices paid, but none of them wire funds out of your account. Actually moving money is always a deliberate step you take in the app.
Is there a record of what an assistant does in my account?: Yes. Every change made through MCP is written to your audit trail, with what happened and who did it. So if an assistant sends an invoice or marks one paid, you have a clear record of it alongside everything else in your account.