MCP
Tenant MCP servers and personal external-service credentials.
MCP servers belong to a tenant, not to individual users. There are no per-server owner, editor or viewer sharing grants. Tenant permissions govern server registration and management; current tenant members can discover and use their tenant's servers.
Credentials are personal. Linking a credential does not expose it to other tenant members, and permission to use a server does not replace authentication required by the external service.
Permissions
This family contains 9 permissions. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.
mcp.credential.link
Link personal credentials to an MCP server, including API-key or OAuth authorization flows.
Link personal credentials to an MCP server, including API-key or OAuth authorization flows.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
mcp.credential.status
Represents baseline access to the caller's MCP credential-link status.
Represents baseline access to the caller's MCP credential-link status. It does not expose another user's credentials.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | No. Personal credential status is available through baseline tenant membership. |
mcp.credential.unlink
Remove the caller's stored credential link for an MCP server.
Remove the caller's stored credential link for an MCP server.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
mcp.server.create
Register an MCP server for the selected tenant.
Register an MCP server for the selected tenant.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Tenant administrator |
| Custom role | Yes |
| Also implies | mcp.server.list, mcp.server.read |
mcp.server.delete
Remove an MCP server registration from the tenant.
Remove an MCP server registration from the tenant.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Tenant administrator |
| Custom role | Yes |
| Also implies | mcp.server.list, mcp.server.read, mcp.server.update |
mcp.server.list
List MCP servers registered in the selected tenant.
List MCP servers registered in the selected tenant.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | mcp.server.read |
mcp.server.read
Inspect an MCP server registration and its configuration.
Inspect an MCP server registration and its configuration.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
mcp.server.update
Change a tenant MCP server's configuration.
Change a tenant MCP server's configuration.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Tenant administrator |
| Custom role | Yes |
| Also implies | mcp.server.list, mcp.server.read |
mcp.server.use
Use a tenant MCP server, including discovering its available tools.
Use a tenant MCP server, including discovering its available tools. A server can additionally require the caller's external-service credentials.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |