Data shared with AI tools
This setting controls how much of your Catalyst data AI tools can read. That covers the Diagrid assistant in the console and any MCP client your users connect, such as Claude Code.
Where the data goes depends on the tool:
- The Diagrid assistant. The data goes to the AI model the assistant runs on.
- MCP clients. The data goes to the client, such as Claude Code, and then to whatever AI model it uses. Diagrid does not control what the client does with it.
Diagrid applies the limit before any data leaves the platform. It does not rely on telling the AI model what to ignore. A tool cannot be talked into reading data the level blocks, because that data is never sent to it.
The two levels
| Level | What AI tools can read |
|---|---|
| Metadata (default) | What is in your organization and how it is running. Not your application data, logs or billing records. |
| Metadata and application data | Everything in Metadata, plus your application data, logs and billing records. |
Metadata
AI tools can read:
- Names, types, settings and status of projects, App IDs, components, workflows and agents
- Workflow runs: status, start and end times, how long they took, and why they failed
- The names of component settings and of the secrets they use, but not their values
- Request and usage metrics, plan limits and token budgets
- Audit history: who changed which resource, and when
AI tools cannot read:
- Workflow inputs, outputs, custom status or exported workflow history
- Key-value store contents or scheduled job payloads
- Application logs
- Values of inline component settings, or the prompts and instructions written for agents
- Resource annotations, including the email address of the person who created the resource
- Invoices, payment methods or billing contacts
If an answer includes something this level blocks, that part is removed or marked as withheld. If none of the answer can be shared, as with application logs, the request is refused and the tool is told why.
Metadata and application data
AI tools can read everything in Metadata, plus everything in the Metadata cannot read list above. For payment methods, they see only the card brand, last four digits and expiry date.
Never shared
Credentials are never shared at any level. API keys, access and join tokens, private keys, client secrets and passwords are removed before anything reaches an AI tool. AI tools can see the name of a secret a component uses, but never its value.
The organization setting is the upper limit
An organization admin sets Data shared with AI tools on the Organization Overview page in the console. It is the most any AI tool in your organization can read, whether that is the Diagrid assistant or an MCP client.
When users connect an MCP client, the consent screen asks them to pick a level for that connection. They can pick a lower level than the organization allows, but not a higher one.
Changes take effect within a minute, for the assistant and for MCP connections that are already open.
