Skip to content
  • There are no suggestions because the search field is empty.

BLAZE Accounts | How to Set Up MCP Permissions

BLAZE MCPs allow your team to interact with BLAZE products (Retail, Ecom, Growth, and Insights) directly from AI assistants such as Claude, ChatGPT, and Microsoft Copilot. Access is controlled through Blaze Accounts—a user can only connect to an MCP when the MCP product is enabled for your company and their assigned role has the appropriate MCP permissions enabled.

Prerequisites

Before configuring MCP permissions, ensure all four of the following requirements are met:

Requirement Responsible Party
MCP access requested and the MCP add-on added to your subscription You (Request) → BLAZE (Billing)
MCP product enabled for your company in Blaze Accounts BLAZE Onboarding
Every MCP user is added as a member of your company in Blaze Accounts Your Blaze Accounts Admin (BLAZE Onboarding can assist)
Assigned user roles have the Read with MCP and/or Write with MCP permissions enabled Your Blaze Accounts Admin (BLAZE Onboarding can assist)

Step 1 — Request MCP Access

  1. Complete and submit the MCP access request form: BLAZE MCP Request Form
  2. Wait for confirmation from the BLAZE team that the Blaze MCP add-on has been added to your subscription and billing is configured.

Step 2 — BLAZE Enables MCP for Your Company

  1. Once the add-on is active, BLAZE Onboarding enables the MCP product for your company in Blaze Accounts.
  2. No action is required from your team during this step; BLAZE Onboarding will notify you once activation is complete.

Step 3 — Add Users to Blaze Accounts

Every team member who plans to connect to a BLAZE MCP must exist as a user under your company in Blaze Accounts. MCP authentication uses Blaze SSO, meaning users without a Blaze Accounts company profile cannot gain access—even if they have an active Retail or Ecom login.

  1. Sign in to Blaze Accounts as an administrator.
  2. Navigate to your company's Users list ([Insert Exact Menu Path Here]).[Insert Screenshot Here]
  3. Verify that every intended MCP user is listed. If anyone is missing, invite or add them to your company.
  4. Note the specific role assigned to each user, as you will need this information in the next step.

Step 4 — Enable MCP Permissions for Each Role

MCP access is granted at the role level rather than per individual user. Each role includes two MCP permissions that apply across all BLAZE MCPs (Retail, Ecom, Growth, and Insights):

Permission Description
Read with MCP Allows the user to look up data through the MCP (e.g., search products, view members, check inventory, read reports).
Write with MCP Allows the user to create, update, or delete data through the MCP (e.g., create a member, update a product, create a promotion).
  1. In Blaze Accounts, navigate to Roles.
  2. Select a role assigned to users who require MCP access.
  3. Locate the MCP Permissions section.
  4. Toggle on Read with MCP for read-only access, and toggle on Write with MCP if the role requires permission to make data changes.
  5. Configure the toggles for both Production and/or Staging environments as needed.
  6. Click Save, and repeat this process for every role that requires MCP access.

TIP: Start by enabling Read with MCP only, and reserve Write with MCP for roles that genuinely need to modify data (such as managers or administrators). AI assistants can execute live changes in BLAZE whenever write access is enabled.

Step 5 — Connect and Test

Once company enablement, user provisioning, and role permissions are complete, users can connect the BLAZE MCP to their preferred AI assistant and authenticate using Blaze SSO:

  1. Open your connected AI assistant and sign in with Blaze SSO.
  2. Run a simple read query to verify the connection (e.g., "List my shops").
  3. If your role includes Write with MCP, test a minor update on a designated test record to confirm write functionality.

Troubleshooting

Use the table below to resolve common MCP access and permission issues:

Issue / Error Message Cause Resolution
mcp_write_forbidden — "The signed-in user lacks write_with_mcp for this company." The user has read access, but their role lacks Write with MCP for the active environment. Enable Write with MCP for the user's role in the appropriate environment (Production or Staging) as outlined in Step 4.
Read requests are blocked or no data is returned The user's role lacks Read with MCP, or MCP is not enabled for the company. Verify the role's Read with MCP setting (Step 4), then confirm with BLAZE that MCP is enabled for your company (Step 2).
Works in Staging but not Production (or vice versa) MCP enablement and role permissions are configured separately per environment. Confirm MCP is enabled and role permissions are toggled on for both Production and Staging.
User cannot access the MCP at all after signing in The user is not a member of your company in Blaze Accounts. Add or invite the user to your company in Blaze Accounts (Step 3).
Previously working MCP connection stopped working MCP access is now strictly enforced through Blaze Accounts role permissions. Review Steps 2–4 to verify company enablement, user membership, and role permissions are properly configured.

 

NOTE: If you continue experiencing issues, contact BLAZE Support and provide the affected user's email address, company name, environment (Production or Staging), and the exact error message.