Skip to main content
When you connect an AI tool to your Chariow store via MCP, you’re granting that tool access to your store data. This page explains what data is shared and how to stay secure.

​
What data is accessible?

Once connected, the AI tool can read the data your team role allows in the store you chose on the consent screen. With full access, this includes: Tools outside your role are neither listed nor callable. For example, a team member with the Support role cannot let an AI tool list team members or read analytics. See Supported tools for the permission each tool needs.
All MCP tools are read-only. The AI cannot modify your store, create products, or process transactions. However, it can read everything your role allows in the connected store.

​
Who can see your data?

When you connect via MCP:
  1. Your AI tool (Claude, ChatGPT, etc.) receives your store data to answer your questions
  2. The AI provider may process and store this data according to their privacy policy
  3. Chariow acts as the bridge: it receives the tool calls, never your conversation
Review your AI provider’s privacy policy. Each provider handles data differently. Chariow is not responsible for how third-party AI providers process, store, or use your data.

​
Security recommendations

​
Only connect trusted tools

Only use MCP connections from AI providers you trust. Verify you’re connecting to official tools:
  • Claude from Anthropic
  • ChatGPT from OpenAI
  • Cursor, Windsurf, or other reputable tools
The Chariow consent screen marks the clients Chariow has reviewed as verified and shows a warning for every other client. Read the client name and redirect address before you approve, and deny any request you did not start yourself.

​
Verify the MCP endpoint

Always confirm you’re connecting to the official Chariow endpoint:
  • https://mcp.chariow.com/public

​
Be mindful of prompts

AI assistants follow instructions, including those hidden in data. Avoid:
  • Pasting untrusted content into conversations
  • Asking the AI to process external URLs or files without review

​
Review access regularly

Periodically check your connected applications:
  1. Go to your Chariow Dashboard
  2. Navigate to Settings → API Keys
  3. Revoke any connections you no longer use

​
Use separate stores for testing

If you’re experimenting with MCP integrations, consider using a test store rather than your production store with real customer data.

​
What Chariow does

  • OAuth authentication: Secure authorisation flow with PKCE and no API keys stored in config files
  • Read-only access: Each connection receives only the read scopes your team role allows, and every tool is read-only
  • Role enforcement: Tools follow the permissions of the team member who approved the connection, and connections lose access when that member’s role is downgraded
  • Automatic revocation: Connections unused for 30 days are revoked, and connections are deleted when the member who approved them loses access to the store
  • Activity log: Actions recorded in your team activity log show whether they came from the dashboard, the API or an MCP connection
  • Rate limiting: 60 requests per minute per connection prevents abuse
  • HTTPS only: All connections are encrypted

​
What Chariow does not do

  • Receive or store your conversations with AI tools
  • Share your data with other users or third parties
  • Control how AI providers process your data
Chariow logs the requests your AI tool sends to the MCP server, such as the tool called and its parameters, for security and troubleshooting.

​
Revoking access

To disconnect an AI tool immediately:
  1. Go to Settings → API Keys in your Chariow Dashboard
  2. Find the MCP connection
  3. Click Revoke
The AI tool will lose access to your store data immediately.

​
Next steps

Setup guide

Connect your AI tool

Supported tools

See available tools