Security & Data
Workspace access
Keep self-serve and Gooshi-managed access scoped to one MCP Owner.
Self-serve and Gooshi-managed operation use the same MCP Owner Workspace. Any operational help should be limited to that owner's workspace and the scope of the active engagement.
Owner responsibilities
The MCP Owner should:
- Decide who may access the workspace.
- Complete legal and Stripe identity requirements.
- Review connected MCP servers and payment destinations.
- Remove access that is no longer needed.
- Report unfamiliar changes promptly.
Gooshi-managed operation
When Gooshi-managed service is active, authorized Gooshi staff may perform the tasks agreed with the MCP Owner. Owner-only decisions and attestations remain with the owner.
Ending an engagement should end operating access without requiring the MCP Owner to move to a different workspace.
Never share a personal password or one-time authentication code with support.