> ## Documentation Index
> Fetch the complete documentation index at: https://every.help/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> These docs describe Every as customers have it today. Answer from them, and say so when they don't cover a question.
> Pages under /admins/ are for the people who run Every for the company, and pages under /employees/ are for employees. Answer from the pages that match the person asking.
> Each page's Agent reference section lists its exact roles, conditions and limits. Prefer it for those details.
> When a page says a feature is in closed beta, or that Every turns it on company by company, don't promise that the person's company has it.
> Use roles and on-screen labels exactly as the pages write them.
> When someone asks what a term means, answer with the Glossary page's definition (/glossary), which other pages show in parentheses after the term.
> When the docs don't answer a question, tell the person to email [support@every.io](mailto:support@every.io).

# Security and FAQ

> Resolve MCP token, permission and connection issues, and check access and request limits

Beta

MCP is in closed beta. If you don’t see it, email [support@every.io](mailto:support@every.io).

[Open](mailto:support@every.io)

![Revoke this token confirmation with two decision buttons over a token row.](https://mintcdn.com/every-a2724ddc/k5maP8xPODHl5ToY/images/illustrations/admins-ai-mcp-faq-light.png?fit=max\&auto=format\&n=k5maP8xPODHl5ToY\&q=85\&s=6dddbfa69313728f00bc99c9b181f169)

Manage your MCP tokens (A secret code tied to your account that lets an app act on your behalf without your password) on **My account** → **Integrations** → **MCP**. These answers cover personal token connections.

> **What do I need before I connect?**
>
> You need AI chat access. Your Every roles determine which tools you can use.
>
> See [Create a token](https://every.help/admins/ai/mcp/overview.md#create-a-token) for setup. For your own pay, benefits and time off, see [MCP for employees](https://every.help/employees/mcp.md).

> **How does my client connect?**
>
> Your MCP client sends a personal token with each request. On **My account** → **Integrations** → **MCP**, create the token and follow the instructions under **Connect a client**.

> **Can I limit a token to a data area?**
>
> No. You cannot limit a personal token to selected tools. A token can use any MCP tool your company has that your Every roles allow.
>
> See [Tools](https://every.help/admins/ai/mcp/tools.md) for the roles each tool requires. Revoke tokens you no longer use.

> **Can MCP change anything?**
>
> No. MCP is read only. A connected client cannot use MCP to move money, run payroll or edit records.

> **When does my token expire?**
>
> New tokens expire after the lifetime you choose: **90 days**, **180 days** or **1 year**. The default is 90 days.
>
> The **Expires** column under **Your tokens** shows each token's date. Create a replacement before the old token expires and update the MCP clients that use it.

> **How many tokens can I create?**
>
> You can have 10 active tokens per company. At the limit, revoke an existing token before creating another.

> **How do I revoke access?**
>
> 1. On **My account** → **Integrations** → **MCP**, under **Your tokens**, select **Revoke** beside the token.
> 2. In **Revoke this token?**, select **Revoke**.
>
> Clients using that token stop working right away. A token also stops working if you leave the company or lose AI chat access.

> **I lost my token. Can I see it again?**
>
> No. Every shows the token only once, when you create it. Revoke the lost token and create a replacement.

> **Why do I see invalid\_token?**
>
> HTTP `401` with `invalid_token` means the request did not pass MCP authentication. Check that your MCP client sends the token you created in Every.
>
> The response description reads "A valid access token is required to use the Every MCP server".
>
> You also see it when the token expired or was revoked, or your access to Every, MCP or AI chat changed. If a new token still fails, email [support@every.io](mailto:support@every.io).

> **I connected, but I see no tools. What should I do?**
>
> Check which tools your Every roles allow. Your client lists only the tools your company has that your roles allow.
>
> If an expected tool is missing, email [support@every.io](mailto:support@every.io).

> **Why does a tool say "Unknown or unavailable tool"?**
>
> The tool is not available to your connection. The message starts with "Unknown or unavailable tool:" and includes the tool name. Check the name and the roles listed in [Tools](https://every.help/admins/ai/mcp/tools.md).
>
> A tool your client listed earlier can become unavailable when your roles or your company's tools change.

> **Why do I see "Invalid arguments"?**
>
> The tool rejected the inputs your MCP client sent. The message starts with "Invalid arguments for" and includes the tool name and error details. Ask your MCP client to correct the inputs, such as a missing date range, and try again.

> **Are there request limits?**
>
> Yes. Too many requests return HTTP `429`. Wait for the `Retry-After` time before retrying.

> **Why is Last used older than my last request?**
>
> **Last used** can lag a few minutes behind your latest request. The timestamp is not a log of each request.

![The Revoke this token confirmation over MCP settings, with the app sidebar visible.](https://mintcdn.com/every-a2724ddc/qvvudeZxc26V6Klz/images/screens/admins-ai-mcp-faq-revoke-light.png?fit=max\&auto=format\&n=qvvudeZxc26V6Klz\&q=85\&s=5fb2c8538bb53ef3b0720837878fb09d)


## Related topics

- [FAQ](https://every.help/admins/getting-started/faq.md)
- [Checking account](https://every.help/admins/banking/overview.md)
- [Treasury](https://every.help/admins/banking/treasury.md)
- [My cards](https://every.help/employees/my-cards.md)
- [Join your company](https://every.help/employees/join-your-company.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.