Security

AI connections now stick to the access you approved

When you connect an AI assistant such as Claude or ChatGPT to Sure Send, you approve a set of permissions, like “view contacts” or “send emails”. Sure Send now holds every tool to that list. An assistant you allowed only to read contacts can no longer send emails or texts, change records, or build automations.

Most connections asked for full access when they were set up, so nothing changes for them. If a tool your assistant used to run now returns an insufficient_scope error, your connection was set up with fewer permissions. Disconnect Sure Send in your AI assistant, connect again, and approve the access it asks for. If your assistant asks for no permissions at all, it only gets read access to contacts and companies each time it connects, so set it up to request the access it needs (for example read write) before reconnecting.

Scheduled messages follow the same rule per channel: a connection allowed to read or send texts only can no longer list or cancel scheduled emails, and the reverse.

The same check now covers the Help Center admin connection. The MCP help page explains which permission each kind of tool needs.