Restrict Space Access

Last modified by Vincent Massol on 2026/09/04 19:20

Steps

Narrow what this wiki's MCP tools may reach to a chosen set of spaces and documents. It narrows results on top of each user's own rights and is not an access-control boundary in itself (see MCP User Permissions).

  1. Open the wiki's administration and go to "Other > MCP Server".
  2. Set "Space access" to whitelist to expose only what you list, or to blacklist to expose everything except what you list.

    space-filter-mode.png

  3. Pick the spaces and documents in the tree below. A space entry covers its whole subtree; a document entry matches that one document.

    space-filter-picker.png

  4. Save the configuration. The change applies to the next request, with no restart.
  5. Ask a connected agent to survey the wiki and check that it reports only what you allowed.

    space-filter-effect.png

FAQ

Does the filter replace the rights check?

No. A document the filter allows must still pass the usual view or edit authorization, and a user still sees only what their own account may see.

What happens if the configuration cannot be read?

The filter fails closed: the document is denied and searches return nothing, so a transient glitch cannot silently defeat a blacklist.

Does it cover semantic search?

No. The two collection tools are governed by collection access rights instead of by this filter.

Which wiki's filter applies when an endpoint reaches another wiki?

The endpoint's own. The target wiki's filter is never consulted, so an entry naming another wiki has to be written on the endpoint you are configuring.

Related

Get Connected