Wiki source code of Agent Authentication
Last modified by Vincent Massol on 2026/09/04 17:44
Show last authors
| author | version | line-number | content |
|---|---|---|---|
| 1 | When you connect an AI assistant to the [[MCP server>>doc:documentation.extensions.user.llm.mcp-server.WebHome]], the assistant authenticates as a real wiki user. Everything the assistant does, it does as that user, with that user's permissions. The assistant can read exactly what your user can read and edit exactly what your user can edit. There is no separate "AI permission" that adds power. The [[document history>>doc:documentation.xs.user.base.page.view.history-tab.view-history.WebHome]] records your user as the author of any changes. | ||
| 2 | |||
| 3 | How the assistant comes to act as your user: | ||
| 4 | |||
| 5 | {{plantuml}} | ||
| 6 | @startuml | ||
| 7 | !theme bluegray | ||
| 8 | |||
| 9 | actor "You" as YOU | ||
| 10 | participant "Your AI assistant" as AGENT | ||
| 11 | participant "Your wiki" as WIKI | ||
| 12 | |||
| 13 | AGENT -> WIKI : asks to connect to the wiki's MCP address | ||
| 14 | WIKI --> AGENT : not yet, this needs a wiki user | ||
| 15 | AGENT -> YOU : opens a sign-in page in your browser | ||
| 16 | YOU -> WIKI : signs in and allows the assistant | ||
| 17 | WIKI --> AGENT : connected, as your user | ||
| 18 | AGENT -> WIKI : reads and edits pages | ||
| 19 | WIKI --> AGENT : only what your user is allowed to see and change | ||
| 20 | @enduml | ||
| 21 | {{/plantuml}} | ||
| 22 | |||
| 23 | == Practical consequences == | ||
| 24 | |||
| 25 | * If your user can edit a space, the assistant can edit that space. | ||
| 26 | * Rights are the hard boundary. Configuration settings (tool enablement, space filters) can only narrow what the assistant can do below your rights, never widen it. | ||
| 27 | |||
| 28 | == Cross-wiki reach == | ||
| 29 | |||
| 30 | When cross-wiki reach is enabled, the assistant can access documents on other wikis in the farm. Access is still governed by your user's rights on those target wikis. |
