MCP Server in OnePlan - Frequently Asked Questions

Direct Answer: Common Questions About the MCP Server in OnePlan

The OnePlan MCP Server lets AI assistants such as Claude, Microsoft Copilot, and ChatGPT read and update OnePlan data on your behalf. It is available in preview to approved customers, who request access through their Customer Success Manager. Each user signs in with their own OnePlan account, the assistant only sees what that user can see in the group they chose, and there are no delete tools. This article answers common questions about access, setup, security, everyday use, and troubleshooting.

What This Article Covers: MCP Server Questions

This article collects frequently asked questions about the OnePlan MCP Server in one place, grouped by topic. Each answer stands on its own and links to the full article where more detail is available.

What you will understand After reading this article, you will have answers to the most common questions administrators, security reviewers, and users ask about the OnePlan MCP Server.

Who This Article Is For: MCP Server Questions

This article is intended for:

Group administrators and AI platform administrators planning or managing setup
IT and security reviewers evaluating the OnePlan MCP Server
End users with questions about connecting and using their assistant

Frequently Asked Questions: MCP Server Access and Availability

Q: How do I get access to the OnePlan MCP Server? A: In OnePlan, the MCP Server is available in preview to approved customers. Contact your Customer Success Manager to request access and for full details.

Q: What does it mean that the OnePlan MCP Server is in preview? A: During the preview, the OnePlan MCP Server is available to a limited group of approved customers, and features and available tools may change. Preview participants share feedback with OnePlan to help shape the feature.

Q: Which AI assistants work with the OnePlan MCP Server? A: The OnePlan MCP Server supports Claude (Free, Pro, Max, Team, and Enterprise; Free plans are limited to one custom connector), Microsoft Copilot through an agent built in Copilot Studio, and ChatGPT (Business, Enterprise, and Edu, on the web).

Q: Can I use other AI assistants with the OnePlan MCP Server? A: OnePlan has tested and documented Claude, Microsoft Copilot, and ChatGPT. Other assistants that support remote MCP servers with OAuth sign-in may work, but they haven’t been tested.

Q: Is the OnePlan MCP Server available in the OnePlan mobile app? A: No. In OnePlan, the MCP Server isn’t available in the OnePlan mobile app.

Q: Which OnePlan modules does the MCP Server cover? A: The OnePlan MCP Server covers Portfolio, Resource Management, Financial Management, Work Plan, and My Work and Approvals. Module tools only work when the module is enabled in your OnePlan group.

Q: Where can I see the full list of OnePlan MCP Server tools? A: The full list of OnePlan MCP Server tools, including which tools are read-only and which can make changes, is in MCP Server in OnePlan - Overview.

Frequently Asked Questions: MCP Server Setup and Administration

Q: Who needs to be involved to set up the OnePlan MCP Server? A: Setup needs a OnePlan group administrator to allow the assistant under Register Custom Apps, plus an administrator for your AI assistant, such as a Claude Owner, a Copilot Studio maker, or a ChatGPT workspace admin.

Q: Do I need to create an app registration to connect Claude to OnePlan? A: No. In OnePlan, a preconfigured Claude app provided by OnePlan recognizes Claude’s published identity. A group administrator adds consent to it from the Global tab of Browse App Registrations, and the Claude Owner selects Use Claude’s published identity when adding the connector.

Q: Should I create a public or confidential app registration for my AI assistant? A: In OnePlan, use a confidential client (with a Client Secret) for Copilot Studio or any assistant that asks for a secret. Use a public client (no secret, with PKCE) for assistants that support it, such as ChatGPT and Claude.

Q: Should I use Group or Organization scope for my app registration? A: In OnePlan, use Group scope when only one group will use the assistant. Use Organization scope when several groups will use it, so each group’s administrator can add consent from Browse App Registrations. Scope can’t be changed after the app registration is created.

Q: Does OnePlan support dynamic client registration? A: Not yet. In OnePlan, create an app registration and enter its details manually, which is why the Copilot Studio and ChatGPT steps use manual or user-defined OAuth client settings.

Q: Do I need to enter scopes, or keep the connection signed in? A: Leave scopes blank. The OnePlan MCP Server supports refresh tokens, so connections stay signed in without scopes. Scopes such as offline_access are accepted but ignored.

Q: Can I turn off individual OnePlan tools for my users? A: Tool access is managed in your AI assistant’s own settings. For example, ChatGPT Enterprise and Edu plans let you choose allowed actions when you publish the plugin. When OnePlan adds or changes tools, it communicates the changes through its release cycles.

Q: What happens if I lose the Client Secret? A: In OnePlan, a Client Secret can’t be retrieved after it’s shown. Select Rotate secret on the app registration under Register Custom Apps to create a new secret, then update your AI assistant with it.

Q: How do I disconnect an AI assistant from OnePlan for everyone? A: In OnePlan, select Remove Consent on the preconfigured Claude app, or select Revoke on your own app registration under Register Custom Apps. Revoking an app registration stops every connection that uses it.

Q: Why doesn’t my AI assistant see new OnePlan tools? A: Some AI assistants, such as ChatGPT, save a snapshot of the OnePlan tool list. Refresh the OnePlan plugin or tool in your assistant to pick up new tools.

Frequently Asked Questions: MCP Server Users and Access

Q: What can my AI assistant see in OnePlan? A: Your AI assistant can only see what you can see in OnePlan, in the group you chose when you signed in. If you can’t see a plan, resource, or field in OnePlan, your assistant can’t either.

Q: Can two users get different answers to the same question? A: Yes. The OnePlan MCP Server works as each signed-in user, so answers reflect each person’s OnePlan permissions.

Q: Can I work in more than one OnePlan group? A: Your connection uses one OnePlan group at a time. To work in another group, disconnect, connect again, and choose that group. Your assistant can’t switch groups for you.

Frequently Asked Questions: MCP Server Security

Q: How does sign-in to the OnePlan MCP Server work? A: The OnePlan MCP Server uses OAuth 2.0 through OnePlan Custom Apps. Each user signs in with their own OnePlan account, including single sign-on if your organization uses it. Public clients use PKCE in place of a Client Secret.

Q: Can the AI assistant access data beyond the user’s OnePlan permissions? A: No. The OnePlan MCP Server enforces the signed-in user’s OnePlan permissions, locks, and read-only settings on every request.

Q: Does the OnePlan MCP Server store or cache my data? A: No. The OnePlan MCP Server is stateless and doesn’t cache OnePlan data. It passes each request to OnePlan as the signed-in user.

Q: Where does the OnePlan MCP Server run, and how is data protected? A: OnePlan runs an MCP Server in each region (Global, Canada, Australia, and Europe), so a regional connection stays on that region’s server. It uses the same encryption as OnePlan and the OnePlan OAuth 2.0 sign-in with tokens.

Q: Does the OnePlan MCP Server follow the same security practices as OnePlan? A: Yes. The OnePlan MCP Server follows the same security approach as OnePlan, including encryption in transit, Azure hosting, and the same data handling and certification information. For details on encryption, certifications, penetration testing, disaster recovery, data deletion, and personal information, see OnePlan Technology / Security Overview.

Q: Can admins revoke access centrally? A: Yes. In OnePlan, a group administrator can select Remove Consent on the preconfigured Claude app or Revoke an app registration under Register Custom Apps. Removing a user’s access to the OnePlan group also removes their access through the assistant.

Q: Can data be deleted through the OnePlan MCP Server? A: No. The OnePlan MCP Server has no delete tools. Write tools can update existing values, so ask your assistant to preview changes before they’re saved.

Q: What happens if data is changed by mistake through my AI assistant? A: Changes made through the OnePlan MCP Server are saved under your name in OnePlan, the same as changes you make yourself. Review the change history in OnePlan to find what changed, and correct the values. The history shows the change under your name but doesn’t show that it was made through an AI assistant. To avoid mistakes, ask your assistant to preview changes first.

Frequently Asked Questions: Using the MCP Server

Q: Do I need to know tool names to use the OnePlan MCP Server? A: No. Describe what you want in plain language, and your AI assistant chooses the right OnePlan tools.

Q: How do I preview a change before it’s saved to OnePlan? A: Add “Preview it first” to your request. Financial, resource, work item, status, and approval changes in OnePlan support a before-and-after preview.

Q: Which changes can’t be previewed? A: In OnePlan, plan creation and plan field updates (including moving a plan to its next step) save immediately. Ask your assistant to summarize these changes before you confirm.

Q: Why can’t I edit tasks on the schedule through my AI assistant? A: In OnePlan, scheduled items (tasks on the schedule) are read-only through the MCP Server. You can submit status updates on your own items, and you can create and update non-scheduled items such as risks, issues, and decisions.

Q: Why didn’t my status update show up in the plan? A: In OnePlan, status updates on your own work items go to the Plan Owner for review. The update appears in the plan after the Plan Owner accepts it.

Q: Can I undo an approval decision? A: No. In OnePlan, an approve or reject decision can’t be undone and advances the plan’s workflow. Make sure your assistant confirms each decision with you first.

Q: Why can’t I change values in some periods? A: In OnePlan, periods on or before a cost type’s status date, read-only cost types (such as rollup and combined cost types), synced plans, and plans locked by a Lock Field can be viewed but not changed.

Q: Why aren’t weekly views available? A: In OnePlan, weekly views are only available when your group stores data daily. Groups that store data monthly show monthly periods.

Q: Are currencies converted? A: No. The OnePlan MCP Server shows currency values as they are stored in OnePlan, with no conversion.

Q: What happens if two people edit the same data at the same time? A: In OnePlan, the most recent save is kept.

Frequently Asked Questions: MCP Server Troubleshooting

Q: Sign-in shows an error after I select my group. What should I check? A: In OnePlan, confirm that a group administrator added consent for your assistant in that group under Register Custom Apps. If you recently removed and re-added consent, sign in again from a private browser window.

Q: Why do answers about a plan include fields I don’t use? A: In OnePlan, plan details include every field on the plan type, including fields from out-of-the-box plan types that your organization may not use. Ask for the fields you want, for example “Show only the owner, status, and dates.” An administrator can also remove unused fields from plan types so responses are shorter and clearer.

Q: Sign-in fails with a redirect or callback error. What should I check? A: In OnePlan, the callback URL on the app registration must match the assistant’s callback URL exactly. A group administrator can select Edit on the app registration under Register Custom Apps and paste the URL again.

Q: The OnePlan sign-in window doesn’t open. What should I do? A: The OnePlan sign-in opens in a pop-up or new tab. Allow pop-ups for your assistant’s website and try again.

Q: OnePlan isn’t listed in my AI assistant. Why? A: Your administrator must add OnePlan to your AI assistant before you can connect. Contact your administrator.

Q: I get no results, or the wrong plan. What should I check? A: Check that you chose the right OnePlan group when you signed in, that the plan name is spelled correctly, and that you can see the plan in OnePlan yourself.

Q: Who do I contact for help with the OnePlan MCP Server? A: For questions about OnePlan data, permissions, or app registrations, submit a request to OnePlan Support. For questions about your AI assistant’s own settings, contact your AI assistant’s administrator or provider.

What to Do Next: MCP Server Questions

Get started with related tasks:

Learn about related topics: