Skip to main content

AI apps for owners and IT

How AI app access works in your organization, how to turn it on and roll it out, and how to turn it off quickly.

How access works​

  • Each person connects their own AI app and signs in as themselves. There are no shared API keys or service accounts, and the AI app never sees a Structured AI password.
  • A connected app sees only what that person can see in Structured AI, and can only change what their role allows. View-only members can connect, but only to read.
  • Changes are off unless you turn them on for the organization and the person also chooses them when connecting. Even then, each change waits for that person's approval unless they turn approvals off for themselves.
  • Access ends after 14 days without use, 90 days after connecting in any case, when the person revokes it, and when they leave the organization.
  • The MCP server at mcp.getstructured.ai holds no customer data. It checks the sign-in and passes each call to Structured AI, which re-checks the person's access, your organization's settings and the project's permissions on every call.

Turn on AI apps​

The organization owner turns on Allow AI apps in Settings > Connectors, under AI apps (in the Organization section). If the panel says AI apps aren't available for your organization, ask us and we'll make them available.

The owner has two switches:

  • Allow AI apps: off by default. While it is off, nobody in your organization can connect an AI app, and apps already connected are refused until you turn it back on.
  • Let AI apps make changes: off by default, so connected apps can only read. Turning it on lets each member choose Also let it make changes when they connect. A member who connected read-only reconnects to get it.

Changes save automatically. The panel also shows how many AI apps are connected in your organization.

Roll out to your team​

  1. Turn on Allow AI apps.
  2. Decide whether connected apps may make changes. If you're unsure, start read-only; you can turn changes on later.
  3. Send your team the Connect an AI app guide. It has the server address and the steps for each AI app.
  4. If your organization manages your AI app centrally (for example on a team or enterprise plan), add Structured AI as a connector there first.

Network requirements. If your network or your AI app restricts which servers it can reach, allow:

  • mcp.getstructured.ai, the MCP server
  • app.getstructured.ai, where people approve the connection
  • the sign-in service named under authorization_servers at https://mcp.getstructured.ai/.well-known/oauth-protected-resource/mcp

Limits​

LimitValue
Calls per person120 per minute
Calls per organization600 per minute
Calls to any one tool, per organization120 per minute
Questions to the Structured AI agent running at once, per organization4
Largest file an AI app can add5,000 MiB

When a limit is reached, the call is refused and the AI app is told how long to wait before trying again.

Costs​

There's no separate charge for connecting AI apps. Connected AI apps work as the person who connected them, so running checks and checklists, and processing documents an app adds, may cost your organization money, the same as when that person does it in the app. The same usage limits apply.

Activity records​

Every call a connected AI app makes is recorded: who made it, which AI app, which tool, which project and document, and the outcome. A change that waited for approval is recorded at each step: asked, approved, declined or expired, and the change itself. There's no screen for these records in Structured AI yet. Ask us if you need your organization's records.

Turn access off​

  • Everyone at once: turn off Allow AI apps. Every connected app is refused on its next call. Connections are kept: turn it back on within 14 days and they work again. After that, members reconnect from their AI app.
  • One app: the member chooses Revoke next to it in Settings > Connected AI apps. It's cut off immediately.
  • One person: removing a member from your organization revokes every AI app connection they hold.

If you think a connection is being misused:

  1. Turn off Allow AI apps. This stops every app in your organization on its next call.
  2. Ask the member to revoke the app, or remove them from your organization.
  3. Tell us. We can turn AI apps off for your organization from our side, or turn off individual tools.
  4. Turn Allow AI apps back on when it's resolved.

Security notes​

  • What a connected AI app reads from Structured AI is sent to that AI app, and is handled under your organization's agreement with the AI app's provider.
  • Drawings, specifications and findings are written by people, and an AI app can come across text in them that reads like instructions. Keep your AI app's own permission prompts on for tools that make changes. In Structured AI, changes wait for the person's approval by default.
  • A connected app can't delete anything, and can't share a project or change who has access.
  • Traffic to mcp.getstructured.ai passes through Azure Front Door with a web application firewall.