Is MCP safe for my business data? A straight answer.
MCP lets your AI assistant talk to outside tools. Before you connect anything, you should know what is exposed, who can read it, and how to shut the door. Here is what matters for the FoxEra MCP server.
What MCP actually does
MCP (Model Context Protocol) is a standard way for an AI assistant to call tools hosted on an outside server. Instead of copying data into a prompt, the assistant sends a structured request — "add this lead", "show campaign results" — and the server responds. The assistant never stores your data; it passes requests through.
Think of it like giving a colleague a phone to make calls on your behalf. The colleague can only press the buttons the phone exposes, and the phone logs every press. MCP works the same way: the assistant can only use the tools the server offers, and every action is recorded.
What the FoxEra MCP server exposes
The FoxEra server exposes a defined set of tools:
- Add leads — names and phone numbers you provide to the assistant.
- List campaigns — see which campaigns exist and their status.
- Preview a campaign — check headcount and estimated cost before anything happens.
- Read transcripts — see what was said on completed calls.
- Approve a campaign — confirm the exact headcount so FoxEra's AI agents can start calling.
The server does not expose your password, billing details, payment method or account settings. Your assistant cannot change your plan, delete your account or access another customer's data. Each API key or OAuth session acts only within your own workspace.
Who can see your data
Only assistants you have explicitly connected can access your FoxEra workspace. Each connection is authenticated — either through OAuth (for MCP) or an API key (for REST). Nobody else's assistant can reach your leads or transcripts.
The AI assistant itself processes your requests in its own session. It does not train on your business data, and it does not share your leads with other users. The data flows from FoxEra's server to your assistant and back — nowhere else.
FoxEra logs every tool call with a timestamp and the identity of the caller. You can review this log at any time to see exactly what was requested and when.
How to revoke access instantly
If you want to disconnect an assistant, you have three options:
- Remove the connection in the assistant's settings — this stops that specific assistant from calling the server.
- Regenerate your API key — if you are using the REST API, a new key invalidates the old one immediately.
- Change your FoxEra password — this revokes every OAuth session at once, disconnecting all assistants in one step.
Revocation is immediate. There is no waiting period, no support ticket, and no need to contact anyone.
The approval gate: nothing happens without your yes
Connecting an assistant does not mean calls start automatically. Before anyone is phoned, you must confirm a campaign preview showing the exact number of leads and the estimated cost. This is a deliberate step — your assistant prepares the campaign, you review it, and only your explicit approval triggers the calls.
This matters because it means a misconfigured assistant or a careless prompt cannot accidentally phone your entire lead list. The gate sits between preparation and action, and only you can open it. Read more about how the AI calling software handles approvals.
Questions to ask before connecting any MCP server
FoxEra is one MCP server among many. Before connecting any server to your assistant, ask these questions:
- What tools does it expose? — read the tool list before connecting, not after.
- Is access read-only or read-write? — some servers only show data; others can change it.
- Is every action logged? — you should be able to audit what the assistant did.
- Can you revoke access? — and how quickly? Instantly is the right answer.
- Does it act within your account only? — one customer's key should never reach another customer's data.
For FoxEra, the answer to each of these is documented in the developer guide. If a server cannot answer them clearly, think twice before connecting it.
Getting started safely
If you are ready to connect your assistant, start with a small test. Add a handful of leads, preview a short campaign, and check the log to see what was recorded. This costs nothing — you can preview without approving, and new accounts come with £7 of free calling credit for when you are ready to run a real campaign.
Connect at https://app.foxera.co.uk/mcp from ChatGPT, Claude, Cursor or any MCP client. Tools that do not support MCP can use the REST API instead. Calls cost from 12p per connected minute with no subscription. See the pay-as-you-go pricing page for details.
Frequently asked questions
Can my AI assistant see my billing details through MCP?
No. The FoxEra MCP server does not expose your password, payment method or billing details. Your assistant can only use the tools listed in the developer guide.
Does connecting an MCP server mean calls start automatically?
No. Connecting gives your assistant access to tools, but no one is phoned until you explicitly approve a campaign preview showing the exact headcount and cost.
How do I know what my assistant did on my account?
Every tool call is logged with a timestamp and the identity of the caller. You can review this log in your FoxEra dashboard at any time.
What happens if I lose control of my API key?
Regenerate it immediately in your account settings. The old key stops working at once. If you use OAuth connections, changing your password revokes all sessions.