MCP Access Permissions

The AI can only perform the actions allowed by the API Key and its associated user account.

An API Key from a site admin account lets the AI perform administrator actions.

An API Key from a regular, non-admin user account limits the AI to the actions and folder access granted to that user account.