> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hi-doctor.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions

> What each Hi-Doctor connector permission grants, which actions can cost money, and what no connected app can ever do.

When you connect an app, Hi-Doctor asks you to approve a specific set of
permissions. The connected app can never do more than you approved, and never
more than your own account is allowed to do.

## Granted by default

| Permission                          | What it allows                                                                                                                                                                               |
| ----------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Your profile**                    | Read and update your name, date of birth, country, language and contact details.                                                                                                             |
| **Consultations and prescriptions** | Read your consultations, prescriptions, orders and payment history; request a prescription reissue; report a side effect; cancel or reactivate your plan, or open the Stripe billing portal. |
| **Messages with your medical team** | Read your message thread and send messages.                                                                                                                                                  |
| **Health questionnaires**           | Complete and submit a medical questionnaire for a doctor to review.                                                                                                                          |
| **Health tracking**                 | Log, correct and delete your weight, injections and daily notes, and set your goal and injection plan. **Weight-loss treatment only.**                                                       |
| **Payment**                         | Create a payment link and check its status, and pull a subscription renewal forward. These can lead to a charge.                                                                             |

See the [tools reference](/mcp/tools) for exactly what each permission covers.

## The one to read carefully

**Payment** is the group that can cost you money, so the approval screen shows
it on its own rather than in the list.

Creating a payment link is safe in itself — nothing is charged until you go
through Stripe's checkout and confirm. **Pulling a renewal forward is not**:
it creates the renewal consultation immediately, uses up the one early order
allowed in the period, and cannot be undone.

Cancelling and reactivating are in the everyday permission instead, because
cancellation is reversible and only takes effect at the end of the period you
have already paid for.

<Note>
  Card details never reach the connector. Payment happens on Stripe's own
  checkout, and changes to your card or plan happen in the Stripe billing
  portal.
</Note>

## What is never available

No connected app — and no AI assistant — can:

* Approve a consultation, prescribe, or change a dose. Those are clinician
  actions and are not exposed at all.
* **Pause** your plan. Pausing is staff-only on the Hi-Doctor backend, so it is
  deliberately not offered here rather than faked. Cancel and reactivate are
  available instead.
* Read another person's data. Every call is bound to your account.
* Bypass the clinical eligibility checks on a questionnaire.
* See your password. It is exchanged for a token at sign-in and never stored by
  the connector or passed to the app.

## Staff accounts

If you sign in with a clinician or back-office account, you get a different and
smaller set of tools appropriate to that role, and the patient-only tools are
not offered. Roles do not stack — an account gets exactly one tool catalogue.

## Changing your mind

Disconnect the app from your AI client's connector settings. Access stops
immediately. Reconnecting asks for approval again.