Pages in this manual

For owners

Revoking access

End one connection, one API key, or all access at once.


You can end access at any time, in Forge, in Settings, on the web or in the Forge app.

End one connection or one key

Every owner and admin of a company can see every connection and API key for it, and end any of them. The person who made a connection can also end it themselves.

Ending a connection stops it at its very next request. Revoking an API key stops it on both the MCP server and the public API at once. Whoever connected a tool can connect it again later.

End everything at once

Turning data access off ends every connection and API key for the company straight away. Turning it back on does not bring them back: each app must be connected again, and each key created again.

When access ends by itself

  • When the person who made a connection or key leaves the company. A key also stops when that person stops being an owner or admin. A connection stops when that person becomes a subcontractor; a project manager's or estimator's connection keeps reading only what their role sees in Forge.
  • When that person deletes their Forge account.
  • When that person withdraws their consent to AI data sharing, or their acceptance of Forge's Terms.
  • When the company is closed. If it is reopened later, the old connections do not come back.

If the company's subscription is paused, connected tools are refused with a message that says billing is the reason. Their connections are not deleted, and they work again once the subscription is active.

What ending access does not do

  • It does not stop an audio or video link already given out. That link keeps working until its 15 minutes are up, so it stops within 15 minutes of a revoke. Everything else stops at the next request.
  • It does not delete what a tool already read. The tool's own terms apply to that.

A key you think was leaked

Revoke it in Settings straight away, then email team@forge.equipment so we can look at what it read.