Authentication
How assistants sign in to Paperful and what they can access.
The Paperful MCP server uses OAuth. You don't need an API key: the first time your assistant connects, a browser window opens so you can sign in to Paperful and approve access.
What the assistant can access
A connection acts as you, in one workspace. It can only see papers you can see in that workspace.
When you approve access, you grant permissions:
| Permission | Allows |
|---|---|
| Read papers | Searching, listing and reading papers. |
| Upload and delete papers | Reserved for future tools. No current tool uses it. |
Staying signed in
Your assistant refreshes its access automatically, so you don't need to sign in again each session. If you stop using a connection for a long time, you may be asked to sign in again.
Disconnect
To remove access, disconnect Paperful from your assistant's settings. You can also revoke access from your Paperful account settings, which disconnects it everywhere.
Only connect Paperful to assistants you trust. Anything the assistant reads from your papers may be sent to its model provider.