What a client can access

Feature groups, scopes, and how you control every MCP connection.

What a connected client can access

A connection gets read access to the feature groups you expose in its preset, which can include:

  • Candidate search, profiles, and contact history (including email and Slack threads).
  • Jobs, pipeline metrics, and interview summaries.
  • Client health, agreements, and billing status.

Writes route through Superposition's agent. Stage updates and outreach drafts pass through the same review layer as the rest of the product before anything goes out, so a connected client can propose actions but never sends on your behalf unsupervised.

Feature groups and scopes

The preset picker groups tools into feature groups — "Candidates", "Jobs", "Clients". Underneath, each tool is governed by a scope written resource:action, the same vocabulary the API uses. A feature group is a friendlier name for a set of scopes.

You do not have to think about scopes to use MCP; the preset picker is the interface. It is worth knowing if you are also building against the API, because the two surfaces describe the same permissions:

Feature groupRoughly these scopes
Candidatescandidates:read, candidates:write
Jobsjobs:read, pipeline:read
Clientsorganization:read, billing:read
Agentagents:read, agents:history, agents:invoke

A read-only preset holds only the :read half of each pair, which is why a read-only connection cannot reach a tool that changes anything — the gate is the scope, not the tool's name.

You control every connection

  • Each connection uses a preset you configure, so you decide which features it can use. Give your personal Claude Code setup search-and-read access, and your team's shared setup more.
  • Create separate presets for different people or tools, and revoke any of them instantly from Authorized Apps.
  • Every request needs a valid short-lived token, and a copied URL alone won't grant access.

Permissions are negotiated at OAuth consent every time you sign in, on top of the preset you picked. Connecting a new tool doesn't open your candidate data to it; you choose exactly what it can reach.

Last updated on

On this page