Get Data and Execute Actions: The New Zoho MCP Permission in Zoho CRM

If you connect AI agents to Zoho CRM through Zoho MCP, there is now a dedicated permission controlling exactly what those connections can do on a per-user basis: API Access for Zoho MCP, found under Developer Permissions in Zoho CRM.

Why This Matters for MCP

An MCP connection acts on behalf of whichever user authorised it, so without a way to scope that access, a user connecting an AI client such as Claude to CRM through MCP would carry whatever access their own profile already had into every MCP session. This permission adds a layer specific to MCP itself, separate from the user's general CRM permissions.

The Two Controls

Get Data. The user's MCP connection can retrieve CRM data, such as running a query or pulling a report, but cannot change anything.
Execute Actions. The user's MCP connection can also perform actions in CRM, such as updating a record, on top of retrieving data.

A Practical Example

A sales rep using an MCP-connected AI client to ask questions such as today's sales figures or total open leads only needs Get Data enabled. If they also want to ask the same AI client to update a deal's sale value directly, the admin needs to separately enable Execute Actions for them. Without it, an attempt to write data through MCP is blocked at the permission level, regardless of what the AI client itself is capable of.

Why this is worth setting deliberately: Since Get Data and Execute Actions are independent toggles, review both for each user rather than assuming one implies the other. A user who only needs read access through their AI client should not be given Execute Actions by default.

Where to Set It

On the relevant profile in Zoho CRM, under Developer Permissions, look for API Access for Zoho MCP and set Get Data and Execute Actions as needed for that profile.

Availability

Available on Professional, Enterprise, Ultimate, CRM Plus, and Zoho One editions, for customers in the US, IN, EU, AU, and JP data centres. Rollout is currently live in the IN data centre only, with other data centres following in phases.

A matching permission also exists for Zia Agents. See the new Zia Agents permission in Zoho CRM.

Need help? 1 Cloud Consultants can help you set up Zoho MCP connections to Zoho CRM with the right Get Data and Execute Actions permissions for each user. Book a discovery call with 1 Cloud Consultants.