3
Adding readonly access for MCP server
Source: outline/outline#11805 · opened by @hall-b
Hi,
Thanks for the great work. I'm super excited about the built-in MCP server.
However I'm concerned about the security aspect of it. I don't feel comfortable giving full CRUD access to an AI agent. I'd rather give him a readonly access. Would it be possible to restrict some scopes (in a similar way you did for API access) when setting up the MCP connection ?
Thanks in advance !
Thanks for the great work. I'm super excited about the built-in MCP server.
However I'm concerned about the security aspect of it. I don't feel comfortable giving full CRUD access to an AI agent. I'd rather give him a readonly access. Would it be possible to restrict some scopes (in a similar way you did for API access) when setting up the MCP connection ?
Thanks in advance !
No pledges yet. Be the first to back this.
Comments
Similar requests
ChatGPT plugin, step 2: inline UI cards via MCP Apps (document list and document preview)
0 votes · 0 comments
Add admin controls for MCP tools when using OAuth
3 votes · 0 comments
ChatGPT plugin, step 1: make the MCP server plugin-ready (securitySchemes, profile tool, structuredContent, manifest)
0 votes · 0 comments
ChatGPT plugin: one public MCP URL on the cloud root domain (workspace-independent OAuth clients + root-domain discovery)
0 votes · 0 comments
Add `get_attachment` MCP tool for downloading attachment content
2 votes · 0 comments
No comments yet.