MCP safety and permissions
Give AI agents minimum AI Glot access, understand read and destructive annotations, and bound the effect of untrusted workspace content.
An MCP client acts with the scopes you approve. Start read-only, add write access only for a concrete use case, and review destructive calls.
Recommended scope sets
| Use case | Scopes |
|---|---|
| Reporting | account:read, usage:read, batches:read |
| Download assistant | account:read, batches:read |
| Translation housekeeping | Add batches:write |
| Terminology assistant | glossaries:read, optionally glossaries:write |
The workspace member ceiling still applies to OAuth. An administrator can keep a person’s connections read-only regardless of what the client requests.
Tool annotations
Standard tools declare whether they are read-only, idempotent or destructive. Renaming and archiving are non-destructive housekeeping; archive can be reversed. delete_glossary is destructive and cannot be undone.
Code Mode’s execute can reach any operation permitted by the connection, including deletion, so it carries the most cautious annotation even when a particular script only reads.
Prompt injection boundary
Batch names and glossary terms are workspace content written by people. An agent may read that content and could be influenced by malicious instructions embedded in it. The sandbox protects the infrastructure from model-written code, but it cannot make untrusted text stop being text.
The practical boundary is permission: an influenced agent can only call the same workspace operations already granted to the connection, and every call is rate limited. Do not grant glossary write access to an agent that only needs reporting.
Before approving a connection
- Confirm the URL is exactly
https://mcp.ai-glot.com/mcpor/mcp/code. - Review the workspace name and requested scopes on the consent screen.
- Prefer OAuth for a person and a dedicated API key for a service.
- Revoke unused connections from Settings → API.
- Review write and delete confirmations in the client rather than enabling blanket approval.