Safety and human review with MCP
An assistant that can reach real clients and prices needs limits. Give it the least it needs, keep commitments with people, and check what it prepares.
- 5/5 on G2
- 4.2 on Capterra
- Building QuoteCloud since 2013
When an AI assistant works with QuoteCloud through MCP, QuoteCloud's guidance is to start with boundaries: give it only the information and actions one job needs, keep pricing, legal terms and commitments for people to decide, and review what it prepares. AI-generated content can contain mistakes, so check every draft before it's sent.
Last reviewed by the QuoteCloud team
Three rules for an assistant that works with QuoteCloud
Each comes from QuoteCloud's own guidance on implementing MCP.
-
Rule 1
Minimum necessary access
- Only the tools and data one job needsA drafting assistant may need clients, templates and products, not authority to send.
- Read-only where possibleFinding documents and answering status questions don't need write access.
-
Rule 2
Drafts, then review
- The assistant preparesA draft, an answer, a suggested follow-up.
- A person checksAI-generated content can contain mistakes. Review it before sending.
-
Rule 3
Commitments stay with people
- Pricing and discountsThe business keeps authority over commercial rules.
- Legal terms and sendingContract wording, what goes to a client and when.
What does human review look like in practice?
In every example on this site the assistant stops at a draft and says what's left to check. Rafe at Morrowgate checks the board price, attaches the proof and sends the quote himself from QuoteCloud.
Ask your assistant to do the same: leave documents as drafts, list what it assumed, and flag what wasn't in the request instead of guessing.
- Prices against your current costs, especially anything new
- Wording it wrote, such as an introduction or a summary
- Recipients, signers and dates
- Anything the assistant says it assumed
-
Rafe OkonjoMon 9 Nov, 8:02 am
Quote this for Marcus at Fernhollow Tea Co. Use our printed carton template and leave it as a draft for me.
Email from Marcus Vale“Can you quote 1,200 printed cartons, 2 colours, same size as the sample (240 × 160 × 90 mm), kraft board? Delivered to our Northgate warehouse by mid-March.” -
Assistant
Done. It's a draft for you to check.
What it did in QuoteCloud
- Found Fernhollow Tea Co. and Marcus Vale in your contacts
- Created a draft from your printed carton template
- Added 1,200 cartons, the cutting forme and pallet delivery from your product library, at your prices
- Put the size, board and delivery in the draft's details
-
Assistant
Gift-range cartons for Fernhollow Tea Co.QuoteCloud · MP-P-3108
- 1,200 printed cartons · $1,548.00
- Cutting forme · $680.00
- Pallet delivery to Northgate · $95.00
$2,555.30 incl. tax Draft · not sent
It's waiting for you. The board price is from the library; check it against this week's mill price before you send.
-
Rafe OkonjoMon 9 Nov, 10:20 am
Checked, proof attached, sent from QuoteCloud. Thanks.
Illustration with a fictional business. The steps show what an assistant can be set up to do through QuoteCloud's MCP service; they are not a list of QuoteCloud's MCP tools.
QuoteCloud controls around every document
Whoever starts a document, it lives in QuoteCloud with these around it.
Security
256-bit encryption and hosting on AWS. See security.
History and audit trail
Documents keep their history and audit trail. Ask us how actions through MCP are recorded.
Approval workflow
On Business, documents can go to a manager before they're sent. Ask us how it applies to drafts your assistant prepares.
Approval workflowUsers and roles
QuoteCloud's roles and template, catalogue and content library permissions, for your team. See the user guide.
Talk through your limits with our team
Book a demo to agree what your assistant should and shouldn't reach, or start a free 14-day trial of QuoteCloud first.
How is this different from AI Co-Worker's review flags?
AI Co-Worker, QuoteCloud's assistant inside the editor (Business plan), marks what it writes as AI content until a person accepts, edits or rejects it.
With MCP, the assistant is your own and works from outside QuoteCloud, so the review is built into how you use it: drafts, never sends, and a named person who checks. Compare MCP and AI Co-Worker.
Safety questions, answered
Is it safe to connect an AI assistant to QuoteCloud?
It's as safe as the limits you set. QuoteCloud's guidance is to begin with boundaries and give the assistant only the information and actions one job needs, keeping pricing, legal terms and commitments with people. QuoteCloud itself uses 256-bit encryption and is hosted on AWS.
Should the AI be able to send documents?
We recommend not. QuoteCloud's own example is an assistant that can create a proposal but not send it, and every example on this site works that way: the assistant prepares a draft and a person checks it and sends it from QuoteCloud.
Do approval rules apply to drafts an assistant prepares?
Approval workflow is on QuoteCloud's Business plan and sends documents to a manager before they go out, based on rules such as discount or total value. Ask our team how it applies to drafts your assistant prepares when you set up the connection.
Can AI-drafted content be wrong?
Yes. AI-generated content can contain mistakes, so review it before sending. Connecting the assistant to your templates and product library helps, because prices and approved wording come from QuoteCloud, but a person should still check every draft.
More on QuoteCloud and AI assistants
What an assistant can be set up to do, how to set it up and the cost.
- Draft quotes from emails and call notesPaste the email or your call notes into your assistant; it can be set up to leave a draft in QuoteCloud for you to check.
- Ask about your pipeline and document statusWhich quotes were opened but not signed, what expires this month: questions your assistant can be set up to answer.
- Find documents, products and approved contentLast year's quote, a product's price, the approved wording: found from the chat, then opened in QuoteCloud.
- Set up MCP and decide what the assistant can reachCheck the plan, ask our team how to connect, decide what the assistant may read and do, start with one job.
- MCP, AI Co-Worker, Zapier and the API comparedYour own assistant from outside, the in-editor AI Co-Worker, or a fixed automation: which fits which job.
- When MCP makes sense, and when it doesn't yetRepetitive work and good data make the case; general writing and messy price lists don't.
- What MCP costsMCP is on Essentials and up. Your AI assistant's own plan is separate.
- FAQAnswers to the questions teams ask before connecting an AI assistant to QuoteCloud.
Useful, not unnecessarily powerful.
Start a free 14-day trial of QuoteCloud, then talk to our team about connecting your AI assistant with the least access it needs.