MCP Tools Management

The tools an AI client sees over MCP come from two settings: an environment-wide allowlist administrators manage, and a personal selection each user can narrow further. See Dawiso Model Context Protocol (MCP) for the full tool reference and role-based access rules.

Manage the environment-wide allowlist

Administrators manage the MCP tool policy for the whole environment on a dedicated settings page. Navigate to Settings > General > MCP Tools.

MCP Permissions

Configuration of MCP permissions takes effect immediately:

• Restrict Contributors to read-only tools: Contributors can call only read-only MCP tools; destructive tools such as object management are hidden and blocked. Admins are unaffected.
• Restrict Admins to Contributor tools: Admins get the Contributor toolset instead of the full one. Combined with the switch above, Admins are limited to read-only tools too.

Allowed tools

The Allowed tools table lists every tool with:

• Tool: Name and description of the tool.
• Access: Tools have either read or write access.
• Minimum role: The lowest role that can use the tool.
• Allowed: Enables the tool for the environment
• Default: Makes an allowed tool available by default for the environment.

Save the configuration.

An empty allowlist is unrestricted: every tool a user’s role permits becomes available, and the page shows a warning banner while the allowlist is empty.

Production vs lab tools

Production tools are served on /api/mcp; lab tools on /api/mcp/lab. Each has its own tool selection here and in My AI tools.

Lab tools configuration is intended for trying out new or experimental tools before they’re promoted to production.

Manage your own tool selection

Each user can narrow their own available tools, separately for production and lab tools, within whatever the administrator allows.

1. In the top-right corner, click your Profile icon.
2. Select My AI tools.

The tools under Tools and Lab tools are listed with:

• Tool: Name and description of the tool.
• Access: Tools have either read or write access.
• Add: Adds the tool to your selection.

If you haven’t made a selection, you inherit the administrator’s default set. You can reset to the default set control.

A personal selection can only narrow the available tools — it never grants a tool that your role or the administrator’s allowlist doesn’t already permit. If an administrator withdraws a tool you had selected, it disappears from your set; if they restore it, your earlier choice applies again automatically.