Fax.Plus MCP Privacy and Permissions

Connecting Fax.Plus to Claude or ChatGPT gives the assistant access to your fax account through a set of tools. Here is what it can see, what it can do, what it cannot do, and how you keep control of each step.

What the assistant can see

• The assistant sees what the Fax.Plus tools you allow return: lists of faxes, a fax record, the pages of a fax it opens, your contacts and groups, your numbers, and your plan and account details.
• When the assistant reads a fax or a contact, that content is processed by your AI client under its own terms. Check your AI provider's privacy and data-use settings, and your organization's policy, before you use it on sensitive documents.
• When you send a fax, you choose the file in the Fax.Plus upload window. The file goes directly to Fax.Plus rather than passing through the model, so the assistant does not read the document it sends.

What the connection can do

The connection works with the Fax.Plus account you signed in with and follows that account's plan and role. Team tools, such as members and number assignment, are for corporate accounts and may need an admin or owner role. To see what your connection is allowed to do, ask:

Tools by what they do

• Read only (look, change nothing): list-faxes, get-fax, get-file, get-file-page, get-fax-thumbnail, get-fax-report, list-outbox-faxes, get-outbox-fax, list-numbers, get-number, list-contacts, list-contact-groups, get-user, get-plan, get-token-info, list-members, get-member-details.
• Change your records: update-fax, bulk-update-faxes, update-outbox-fax, bulk-update-outbox-faxes, create-contact, update-contact, create-contact-group, update-contact-group, set-contact-groups, share-contacts, share-contact-groups, update-number.
• Send a fax: the send flow, where you choose the file in the Fax.Plus upload window, and resend-fax.
• Delete (destructive): delete-fax, delete-outbox-fax, delete-contact, delete-contact-group.

Control each tool in your client

Your AI client lets you set each tool's permission. In Claude, for example, a tool can be allowed, set to Needs approval, or Blocked.

• Keep every tool that changes records, sends or deletes on Needs approval, so nothing happens without your OK.
• Block the tools you never use, for example the delete tools.
• Read-only tools can stay allowed.

Whether your client asks for approval also depends on its own settings, so check them once after you connect.

What MCP deliberately cannot do

Buying or releasing fax numbers, reading your account balance, inviting team members or changing roles and quotas, changing account settings, webhooks and bulk deletion are not MCP tools. They spend money, change who has access to an account, or destroy records that often serve as proof of transmission, so they stay in the Fax.Plus dashboard and the REST API. See MCP or REST API.

For your own agent (Enterprise)

An agent you run yourself connects with a Personal Access Token, an Enterprise feature. Give the token only the scopes the agent needs: start read-only with fax:all:read, and add fax:fax:edit or fax:all:edit only if the agent has to send or manage faxes. Store the token as a secret. See Fax Automation with AI.

Disconnect at any time

You can revoke the connection at any time. Remove or disconnect the Fax.Plus connector in your AI client, and the assistant can no longer reach your account until you connect again.

Accounts with Advanced Security Controls

MCP is unavailable for accounts with Advanced Security Controls, including HIPAA and PHIPA configurations. Those accounts keep their controls in place; see the HIPAA-compliant fax page for other options.

Good habits

• Use codes, such as a matter, case or PO number, instead of names in prompts and fax comments.
• Keep fax numbers and document contents out of screenshots and summaries you share.
• If a reply looks wrong, check the current state before you try again, so nothing is sent or changed twice.

Related

Fax.Plus MCP troubleshooting, Set up a fax desk with AI, MCP or REST API, and the MCP setup hub.