Use Limit to specific clients when an assistant should work only with a defined set of customer accounts. This is a connection restriction, separate from the staff account’s permissions and the tool’s risk ceiling.

Select the permitted clients

1. Open PD Modules → MCP Hub → Connections and choose Edit on the intended assistant.
2. Find Limit to specific clients.
3. Search for and select each client that belongs in the permitted set.
4. Check the displayed selections carefully, including clients with similar names.
5. Review the other connection limits and choose Save changes.

A blank client selection means every client within the connection’s other permissions. It does not mean no clients. If the assistant should have no access, revoke its connection instead of clearing this field.

Understand what the limit covers

Client scoping narrows supported searches and lookups. It does not add a staff permission or raise the ceiling. A permitted client can still be unavailable if the selected WHMCS administrator with the appropriate role permissions lacks the operation’s required access.

Some tools operate across the installation rather than on one client. In particular, the knowledge base is shared content: a client-limited connection cannot use its KB operations. Giving an article private visibility does not turn it into a resource owned by the selected client.

Verify without broadening the task

Refresh the assistant’s connection after saving. For a lookup you are authorised to perform, confirm that the intended client is available and review Audit trail for any refusal. Do not use unrelated customer accounts as test data.

If the task is editing shared knowledge-base content, use a separately authorised content connection with the necessary content permissions. Do not remove the client limit from a customer-specific assistant simply to silence a refusal.

The token stays the same when you edit client scope. Record why the selected set is needed and review it when the assistant’s purpose changes; retaining an old client in the picker retains that part of its access.

See the PD MCP Hub WHMCS guide for related tasks, or explore PD MCP Hub.