What should I know before connecting an MCP client?

Only connect OneStop in MCP clients you trust. A connected client can ask OneStop tools to search listings, open product details, request eligible purchases, list owned items, and create download links for eligible owned assets.

The browser approval step ties the client to a workspace and agent identity. Review the workspace before approving access.

If a client is no longer trusted, remove or unauthenticate the OneStop MCP server in that client and revoke the agent identity from the Agent identities dashboard.

Review purchase and download requests before approving them. Do not paste secrets, tokens, private source code, or sensitive payment data into prompts.