Security is a core part of Fitvia MCP. We use industry-standard practices to ensure your data and your clients' data remain protected at all times.
Authentication
When you connect an AI assistant to Fitvia MCP, the system uses OAuth-based authentication to verify your identity. This means the AI can only access your account after you explicitly log in and authorize the connection. No credentials are shared with the AI platform.
Permissions
Fitvia MCP follows the principle of least privilege. The AI assistant can only perform actions that your trainer account is authorized to perform. You maintain full control over what data the AI can access and what actions it can take. The AI cannot access client data or perform actions beyond what your account permissions allow.
Data Protection
All communication between your AI assistant and Fitvia is encrypted using industry-standard TLS (Transport Layer Security). Your data is never stored on the AI platform's servers. Each request is authenticated and authorized in real-time, ensuring your data remains protected at all times.
Access Control
Fitvia MCP can perform actions within the scope of your trainer account, including creating and modifying workout programs, viewing client information, and checking business metrics. It cannot access other trainers' data, modify system settings, or perform administrative actions beyond your account scope.
Revoking Access
You can disconnect your AI assistant from Fitvia at any time through your Fitvia dashboard. Once revoked, the AI assistant will no longer be able to access your Fitvia account. All previously granted permissions are immediately invalidated. You can reconnect at any time by re-authorizing the connection.
Questions about security?
If you have any questions about how Fitvia MCP protects your data, contact our support team.