Miro MCP Server (admin guide)

Who can do it: Company and team admins on Enterprise plans

As a company admin for an Enterprise subscription, you control whether Miro MCP Server is available to your organization. This setting determines whether your teams can use AI integrations that connect with Miro.

Use Miro MCP (Model Context Protocol) to connect your Miro boards to MCP‑compatible AI tools. When enabled and authorized, AI agents can read context from specific boards and (where allowed) take actions such as summarizing content or creating diagrams via a curated set of Miro MCP tools. This guide explains prerequisites, enablement, governance, and troubleshooting.

Before you begin

• Enable MCP for your organization, then use Access control to decide who can use it.
• You can keep access open to everyone, or limit it to selected teams and optionally user groups. Board‑level permissions still apply.

Enable or disable MCP Server

To enable MCP Server:

1. Go to Admin settings > Apps and integrations > MCP.
2. Under Enable MCP, turn on Allow users in your organization to connect Miro to MCP-compatible clients.

Changes take effect immediately.

To temporarily halt usage, turn the same toggle off (halts new tool calls).

MCP may use Miro AI for format generation or content-related actions. Those actions consume your organization's Miro AI credits.

If you don't see the MCP settings, contact your account manager.

Control access with teams and user groups

Under Access control > Teams and user groups, choose who can use Miro MCP after you enable it.

Restrict access to specific teams and user groups

1. In Admin Console, go to Apps and integrations > MCP.
2. Under Access control, open the Teams and user groups dropdown, then select Specific teams and user groups.
   The Add MCP access panel opens.
3. Select teams:
   1. Choose All teams in your organization, or Specific teams.
   2. If you choose Specific teams, open the team selector, search and select teams, click Add teams, then return to the panel.
   3. Click Next.
4. Filter by user groups:
   1. Choose All users in selected teams, or Only users who are also in specific user groups.
   2. If you choose specific user groups, open the user group selector, search and select groups, click Add user groups, then return to the panel.
   3. Click Next.
5. Review and confirm the summary (for example, users in 6 teams who are also in 1 user group will have access to Miro MCP). You can click Edit to change teams or user groups.
6. Click Add access.

How team and user group access works

When you use Specific teams and user groups, a user can authorize Miro MCP only if they meet both conditions you configured:

1. They belong to a selected team (or any team, if you chose All teams).
2. If you selected user groups, they also belong to at least one of those user groups.

If you choose All users in selected teams, only the team requirement applies.

Membership in a user group alone is not enough. The user must also be in a selected team.

When you select more than one user group, a user needs to match any one of them (not all of them).

Examples

• Everyone: Any user in an enabled team can authorize MCP.
• Specific teams (for example A and B), all users in selected teams: Users in Team A or Team B can authorize MCP. Users only in Team C cannot.
• Specific teams (Team A) and specific user groups (User Group 1): Only users who are in Team A and User Group 1 can authorize MCP. For example, if Team A has 100 members and User Group 1 includes 20 of them, only those 20 can use MCP.
• All teams and specific user groups: Users in any team who are also in a selected user group can authorize MCP.
• Switch back to Everyone: Access is no longer limited to the teams and user groups you selected in the panel.

How access and permissions work

When you enable MCP, you allow:

• External AI agents to read board content when authorized by users.
• AI tools to create or modify content on Miro boards.
• Secure data exchange between Miro and third-party applications.

Important security considerations:

• All access is authenticated through OAuth 2.1.
• Users can only grant access to boards they have permission to view.
• Enterprise security compliance is maintained.
• Standard API rate limits apply to all operations.
• Users in your org will be able to authenticate to the MCP Server allowing external or third-party AI agents to read and create content on a board on their behalf.
• If you restrict MCP with teams and user groups, users outside that selection can't authorize MCP.

Managing MCP in your organization

As an admin, you should consider:

1. Communication: Inform your teams about Miro MCP availability and use cases.
2. Training: Provide guidance on how to effectively use MCP with different AI tools.
3. Governance: Establish guidelines for appropriate use of AI-generated content.
4. Monitoring: Periodically review MCP usage and adjust settings as needed.

For more information on managing apps in your Miro environment, see the App management documentation.

Rollout guidance

• Start small: under Access control, choose Specific teams and user groups, select one or two pilot teams, and leave user groups as All users in selected teams.
• For a narrower pilot, also choose Only users who are also in specific user groups so only that group can authorize MCP.
• Reinforce prompt hygiene: require users to include a full board URL in every MCP prompt.

Control which MCP clients can connect to Miro

As Company admin, you can allow all clients to access Miro from your organization, or manage an allowlist of clients, including your own custom MCP clients.

Follow these steps:

1. In Admin Console, go to Apps and integrations > MCP. If you have not already enabled MCP, see Enable or disable MCP Server.
2. Under Access control, All clients is the default setting. To modify, click All clients,then click Specific clients.
   The Specific MCP clients panel opens.
3. Toggle on which clients you want to allow. To allow a custom MCP client, input the name of your client in the search bar (top), then click Add. For more information, see Miro MCP developer documentation.
4. Click Save.
   The panel closes, and your specified clients show in a row under Access Control.

To disallow any client, return to Apps and integrations > MCP > All clients (under Access Control) and toggle the client off.

If you add a custom MCP client and then later disallow it, the client is removed from the list. To re-allow, you must re-add the client. See step 3 in Control which MCP clients can connect to Miro.

Troubleshooting

• “I can’t see Miro MCP tools in my client”
  • Confirm MCP is enabled for the organization.
  • Under Access control > Teams and user groups, confirm the user is included (in a selected team, and in a selected user group if you configured one).
  • Re‑run the OAuth flow and select a team that has MCP access.
  • Verify the client supports MCP and is among the clients we’re targeting/documenting.
• “Access denied when prompting”
  • Ensure the prompt includes a full board URL; agents won’t auto‑discover boards.
  • Confirm the user already has access to that board in Miro.
  • If the user previously had access and it stopped working, check whether Teams and user groups access control changed, or whether they were removed from a selected team or user group.
• “We need to pause usage now”
  • Toggle MCP off in Admin settings > Apps and integrations > MCP.
• "A user's client is blocked / returns an access error"
  • Confirm the client is toggled on under Access control, or add it as a custom client.