# Use SmallForce in ChatGPT, Claude, and Codex

SmallForce exposes a remote Model Context Protocol (MCP) service. A connection
is bound to one organization selected during SmallForce OAuth. The client never
chooses an organization by sending an ID with a tool call.

## Connect safely

1. Add the official SmallForce connector or MCP server in the AI client.
2. Sign in to SmallForce and select one organization.
3. Review the requested permission groups. Reads, account connections, writes,
   publishing, advertising launch, and employee actions are separate scopes.
4. Begin with company status or another read-only request.

SmallForce rechecks the bearer token, current organization membership, role,
plan, Company OS readiness, and required scope on delegated calls. An internal
service credential cannot select a user or organization by itself.

## Rich views and ordinary tool results

Compatible hosts can render SmallForce React views for company status, files,
employee conversations, email, calls, connected apps, social publishing,
websites, and advertising. The same tools also return concise text and typed
structured data, so the workflows remain usable when a host does not render a
view. A host's surrounding chat composer is part of that host, not the
SmallForce view.

## Connected apps

Search for an operation, inspect its current schema and classification, then
select an exact connected account. Ask before starting another provider
connection. Authorization beginning is not proof that a provider connection
finished.

Read operations use the query tool. External writes require the write scope,
an exact account, explicit confirmation of the displayed action and arguments,
and an idempotency key. Financial transactions are unavailable through the
public generic connected-app tool.

## Employee planning and confirmed actions

An MCP employee chat can research, inspect, plan, and draft. Mutation-capable
OS tools are blocked for ordinary chat turns. When the plan needs a change, the
assistant creates a durable action proposal bound to the same organization,
user, OAuth client, employee, and source chat session.

The proposal displays its exact instruction, risk, digest, and 15-minute
expiry. Nothing executes until the user separately confirms the unchanged
proposal. A confirmed proposal admits one bounded employee turn; changed,
expired, cross-client, or already-decided proposals fail closed.

## Revoke access

Remove SmallForce from the AI client's connector settings or revoke the client
in SmallForce. Disconnect an individual provider account when you want to
remove only that integration. See [SmallForce support](/support) for connection
troubleshooting and deletion requests.