Wiki source code of Restrict Space Access
Last modified by gabrielc on 2026/10/21 10:53
Show last authors
| author | version | line-number | content |
|---|---|---|---|
| 1 | Narrow what this wiki's MCP tools may reach to a chosen set of spaces and documents. It narrows results on top of each user's own rights and is not an access-control boundary in itself (see [[MCP User Permissions>>doc:documentation.extensions.admin.llm.mcp-server.user-permissions.WebHome]]). | ||
| 2 | |||
| 3 | 1. Open the wiki's administration and go to "Other > MCP Server". | ||
| 4 | 1. Expand "Additional filters" and set "Space Filter Mode" to ##whitelist## to expose only what you list, or to ##blacklist## to expose everything except what you list.((( | ||
| 5 | {{image reference="space-filter-mode.png" size="large" alt="The Space access part of the Additional filters group, with the Space Filter Mode select set to whitelist and highlighted"/}} | ||
| 6 | ))) | ||
| 7 | 1. Pick the spaces and documents in the tree below. A space entry covers its whole subtree; a document entry matches that one document. With cross-wiki reach on, an entry can name another wiki (##second:Sandbox##) and then matches content in that wiki only.((( | ||
| 8 | {{image reference="space-filter-picker.png" size="large" alt="The space picker of the MCP Server administration, with the Release Notes space ticked and highlighted, and the matching chip listed above the tree"/}} | ||
| 9 | ))) | ||
| 10 | 1. Save the configuration. The change applies to the next request, with no restart. | ||
| 11 | 1. Ask a connected agent to survey the wiki and check that it reports only what you allowed. A filtered document is refused with a message saying it is outside what the endpoint exposes, not as missing.((( | ||
| 12 | {{image reference="space-filter-effect.png" size="extra" alt="A terminal session in which the assistant surveys the wiki and reports the single allowed space, highlighted"/}} | ||
| 13 | ))) |
