What each row shows
One row is one person signed in with one app. If a person connects Claude and Cursor, you see two rows.
An Active connections row: the app name, Connected by, Last used, and Revoke.
Revoke a connection
Click Revoke on the row. The connection ends at once: the app’s next request is refused, and the person has to sign in again from their app.Revoking ends one sign-in. It does not stop the person from connecting again. If they still hold an allowed role, they can reconnect. To keep someone out, also remove their role from Who can connect, or change their role in your team settings.
All the ways to cut access
Settings changes do not delete connections. When a role, area or the whole server is turned back on, apps that are still signed in work again. Revoke the connections too if you want everyone to sign in again.
What the person sees
- A revoked connection: their app is no longer signed in. Most apps then ask them to sign in again.
- A switched-off server or a removed role: the app’s list of tools is empty, and using a tool returns a message such as “The MCP server is not enabled for this institute” or “This user’s role is not allowed to connect to the MCP server”, with a pointer to the MCP settings.
- An area set to Off: its tools disappear from the app’s list.
When someone leaves your team
- Revoke every row where Connected by shows them.
- Remove or change their role in your team settings.