Woodander MCP FAQ
Answers on privacy, plans, costs, revoking access, safety and what your assistant can and cannot do with the Woodander API and MCP.
Which clients work? #
Claude Code, Claude Desktop and Cursor have guides here. Any client that can call a remote MCP server over HTTP with a bearer token should work, and the same data is available over REST at /api/v1.
Which plan do I need? #
A plan with API access, or the Project Pro pass for Discover, your own Newsroom and Market only. Details are on Limits and errors.
Does it cost AI credits on Woodander's side? #
No. Your own assistant does the thinking, using your own subscription or API key. Woodander only serves your data and runs the changes you allow. Some data tools use plan limits, such as daily keyword lookups.
Who can see my data? #
A token sees only what its owner can see in the Workspace. Other users' data comes back as not found. Responses carry no secrets and never include other people's emails.
Does my assistant read live Google data? #
No. Search Console and GA4 answers come from data Woodander has already synced, not from live calls per request. So numbers can lag a little behind Google.
Can my assistant publish without asking me? #
Only if you set that up. In Manual mode (the default), every change is a proposal. Public actions and Tag Manager publishing wait for your confirmation in Hybrid. Only in Autonomous mode can publishing run on its own, and for Tag Manager the token also needs publish:gtm and stays under a daily cap. See Modes and approvals.
Can it edit my live Tag Manager container or project page? #
No. Tag Manager changes go to a "Woodander" workspace, and project edits go to your draft. Trusted owners' safe edits can go live at once, and editors can revert them.
How do I revoke access? #
Open Settings → API & MCP and revoke the token. It stops working immediately. You can also lower a container or project to Manual mode, or untick write access. For Google permissions, you can also remove access in your Google account.
What if I paste a token somewhere public? #
Revoke it at once and create a new one. A token is shown only once, so you cannot read it back.
Can my team use it? #
Tokens follow the same rules as the Workspace: a token sees your own data and the workspaces and teams you can see there. Create a separate token per person and per tool, so you can revoke one without touching the rest.
Where is the full tool list? #
On the developers page. OpenAPI JSON is at /api/v1/openapi.json.
What is coming? #
Some tools are not built yet. For example, writing Media articles through the API is not available at this time. We will add new tools to the developers page when they ship.