3
Adding readonly access for MCP server
Source: outline/outline#11805 · opened by @hall-b
Hi,
Thanks for the great work. I'm super excited about the built-in MCP server.
However I'm concerned about the security aspect of it. I don't feel comfortable giving full CRUD access to an AI agent. I'd rather give him a readonly access. Would it be possible to restrict some scopes (in a similar way you did for API access) when setting up the MCP connection ?
Thanks in advance !
Thanks for the great work. I'm super excited about the built-in MCP server.
However I'm concerned about the security aspect of it. I don't feel comfortable giving full CRUD access to an AI agent. I'd rather give him a readonly access. Would it be possible to restrict some scopes (in a similar way you did for API access) when setting up the MCP connection ?
Thanks in advance !
No pledges yet. Be the first to back this.
Comments
Similar requests
Add admin controls for MCP tools when using OAuth
3 votes · 0 comments
Add `get_attachment` MCP tool for downloading attachment content
2 votes · 0 comments
Allow configurable session expiration for MCP server authentication
2 votes · 0 comments
Feature Request: Support @user mentions and integration mentions when creating/updating documents via MCP
1 vote · 0 comments
Official Outline MCP Server
3 votes · 0 comments
No comments yet.