Permissions & Scopes

Every action through the AI Suite MCP runs as the backend user for whom the token or OAuth grant was issued, with their full TYPO3 rights. Page and file mounts, table and field rights, as well as the feature and model rights of the AI Suite are enforced unchanged.

The OAuth scopes additionally apply. They can only restrict access, never extend it beyond the TYPO3 rights of the user.

For a user to use the MCP at all, their backend group must have the feature right enable_mcp_access. If it is missing, the client connects, but every tool call is rejected with "no permission".

Which tools are available for using AI Suite features is determined by the respective AI Suite feature rights (e.g., metadata generation, translation, image generation). Without the appropriate right, the affected tool does not appear in the tool list of the model at all. Rights are assigned as usual per backend group, see Permission Management.

These feature rights are required for the MCP:

• enable_mcp_access: Mandatory. Main switch for MCP and the MCP dashboard in the backend module, checked directly with every request. No OAuth scope corresponds to this right.
• enable_metadata_generation: for batchGenerateMetadata, generateFileMetadata, batchGenerateFileMetadata, batchGenerateFolderMetadata.
• enable_translation: for all translation tools with external AI providers.
• enable_image_generation: for generateImage.
• enable_massaction_generation: for batch and background tools.
• enable_mcp_media_upload: for uploadMedia.
• enable_mcp_rendered_page_read: for readRenderedPage.

A right usually applies to an entire scope. An exception is readRenderedPage. The tool sits in the rights-free scope mcp:read but additionally needs enable_mcp_rendered_page_read. It renders the page via a backend preview session of the MCP user and thus also delivers hidden pages, unpublished pages, and workspace drafts, i.e., content that a simple retrieval of the public URL never reaches. The right is attached to the tool and not the scope, otherwise, all reading tools would be eliminated with a switch. Without the right, the tool does not appear in the tool list, and a forced call ends with a permission error. The user's page rights apply unchanged on top.

Each tool is assigned to a scope. A scope is only granted to a token if the backend group possesses at least one of the associated AI Suite feature rights.

There are no more scopes. Easy language and the DeepL glossary are not separate scopes but part of the translation tools under mcp:translate: The site's glossary is automatically applied, and easy language runs through the same tools. The scopes a token actually receives are listed on the consent page when connecting.