Hanover Park

No. Hanover Park states that only firm admins and members can authorise an MCP connection, and that LP contacts, partner contacts and auditors cannot. This makes the connector a GP-side and fund-administrator tool rather than an LP portal. An LP who wants their own position still goes through the firm or the web app, so the connector never widens who can reach LP data.

Yes. Hanover Park documents that the MCP server enforces identical authorisation to the web app — the same firm membership checks, the same fund role requirements and the same row-level filtering, with no separate auth path and no elevated privilege. Permissions are re-validated on every request, so a role downgrade or account deactivation takes effect immediately, even mid-session.

No. Hanover Park states the server is read-only and cannot create, update or delete anything, and all 12 listed tool names are get or list verbs. Changes go through the Hanover Park web application instead. The vendor repeats the read-only claim in three separate places on its MCP page, including under Tips for Best Results.

No, not on Hanover Park's side. The vendor states the MCP server returns data into the conversation and does not cache or store query results itself. Retention then depends entirely on the AI client you connect — Claude, ChatGPT, Cursor — and that client's own privacy policy. For confidential LP and portfolio data, the client's retention terms are the control that matters.

No. Hanover Park states that MCP access is included in your existing plan at no additional charge, so there is no separate MCP tier or add-on to buy. The gate is account role rather than price: you need to be a firm admin or member on an active Hanover Park account, and auditors and LP contacts are excluded regardless of plan.

No, not on the server side. Hanover Park states that all read-only tools are available to any authorised user who has access to the underlying data, with no per-tool toggle. Your only lever is the data permission itself — the fund roles and row-level filters set in the web app — plus whatever tool-level approval controls your MCP client offers.

One hundred requests per minute per user, as documented on Hanover Park's MCP page. That is a per-user ceiling rather than a per-firm one, so several people at the same firm each get their own budget. Access tokens expire after one hour and refresh automatically, which is a separate mechanism from the rate limit.

Documents and Drive files are the big exclusion — K-1s, audited financials, capital call notices and PCAPs are all out of reach. Hanover Park also lists balance sheet and journal-line detail, waterfall modelling, email, bill pay and QA workflows as not yet reachable. The income statement is exposed, but the balance sheet behind it is not.