Skip to main content

​
Authentication

A compatible client discovers protected-resource metadata and the authorization server, then opens browser consent. The admitted workspace owner chooses access. The AI client does not receive the owner’s Geldee browser session, Google password or bank credentials. OAuth access tokens are short-lived. Refresh credentials rotate and cannot extend a finite grant’s approved deadline. Expired or revoked access requires the supported reconnection flow.

​
Runtime discovery

The live tools/list is authoritative for the current authorization. The public tool reference describes capabilities, not a promise that every connection receives every tool. Read permissions and account restrictions are enforced on requests. A selected-account grant cannot invoke a whole-workspace summary and present it as a household total.

​
Documentation versus financial MCP

These public pages contain product instructions, not your financial records. A documentation search service, if configured on the docs host, is separate from the authenticated financial MCP endpoint above. See AI quickstart and permissions.