Security & privacy
This page is written for administrators and IT teams reviewing the edrone MCP connector before approving it.
Authorization
The connector uses OAuth 2.1 with PKCE and Dynamic Client Registration (DCR):
- Your AI assistant registers itself with the edrone authorization server.
- You are redirected to the edrone panel, where you sign in with your own edrone account and approve access.
- The assistant receives a token bound to your account and to a single store.
No edrone passwords, API keys or secrets are ever entered into the AI assistant.
Scope of access
- One store per connection. A token is issued for the single store (tracker) you authorized. The assistant cannot reach other stores in your account.
- Your permissions apply. The connection acts on behalf of the user who signed in.
- Analytical tools. The tools currently available read and summarise data from your edrone account — see Available tools for the full list.
Token lifetime
| Token | Lifetime |
|---|---|
| Access token | 10 minutes |
| Refresh token | 60 days, rotated on every refresh |
As long as the connector is used at least once every 60 days, it stays connected without another browser sign-in. After 60 days of inactivity the refresh token expires and you need to authorize again.
Revoking access
An account administrator can review and remove connections at any time:
- Open Mission Control → Integrations → MCP.
- Find the agent in the list of connected assistants.
- Click Revoke.
Revoking immediately invalidates the existing connection and blocks that user from connecting again until an administrator restores access. Removing a user from the store also revokes their connector access for that store.
What data leaves edrone
When your assistant asks a question, edrone returns the result of the matching tool. Depending on the question this can include:
- aggregated analytics — revenue, campaign performance, subscriber and segment statistics, product and order data;
- customer contact details — the customer tools can return a customer's email address, name and phone number.
Who processes that data
The data is returned to the AI assistant you connected. That provider (for example Anthropic for Claude, or OpenAI for ChatGPT) processes it under your own agreement with them — they are not edrone's subprocessors for this feature. Retention, model-training policy and processing location on the assistant's side are governed by that provider's terms.
Because the connector can expose personal data of your customers, make sure that connecting a given assistant is covered by your own data protection arrangements.
For details of how edrone processes personal data, see the edrone Privacy Policy.