Permissions and security
In the manual, the agent works only with your account’s permissions. This page covers what it may and may never do, how to disconnect it and what the public connector sees.
The agent has your account’s permissions
The connector has no account of its own. The agent acts as the user who signed in and sees and edits exactly what that user can in the panel.
| Signed-in account | What the agent sees and edits |
|---|---|
| Admin | the whole manual |
| Multibrand editor | only the brands an Admin assigned to them |
At sign-in you also decide whether the agent may only read (Read content) or also edit (Edit content (write via MCP)). A read-only connection does not even receive the editing tools. Roles and their permissions are described in Users and roles.
What the agent never reads or changes
- manual, page and file passwords and allowed email domains,
- the DeepL translation key and other secrets,
- users, their roles and assigned brands,
- files on the server outside the manual content.
The agent does not delete anything either – pages, sections and files can be deleted only in the panel. It can only hide a section, so you can always bring it back.
Protection against writing to the wrong manual
If you manage several Visualbooks, your AI tool has several connectors with the same functions. To stop the agent writing to the wrong manual, it must state the address of the manual you named in your prompt with every edit. If the address does not match, Visualbook rejects the write. When a request is ambiguous, the agent is expected to ask first.
Signing in and disconnecting apps
Connecting works by signing in in the browser (OAuth). You never see a token or copy it anywhere. The consent screen may show “Unknown app – approve only if you started this connection yourself”. If you did not start it, click Deny.
All connections are listed under Your account in MCP connectors (read and write): the app name, when it was created and when it was last used.
- Revoke disconnects one app, Revoke all disconnects every app at once.
- Changing the account password disconnects all apps automatically.
- Deleting an account removes its connections too. When a colleague leaves, delete their account.
- A connection nobody has used for 30 days expires on its own.
Log of agent edits
Every agent write is recorded. You see the edits on the Overview in the History tab, just like panel edits. If you subscribe to the change report email, they are in it too. See Backup and restore.
What the public connector sees
The public connector (…/mcp/public) only reads, and only content a site visitor sees:
- published pages – without locked pages and without files protected by a password or email,
- basic brand details such as name, description and languages.
It does not read the manual’s design settings or anything from the panel.
When you lock the whole manual, the public connector turns off. It accepts at most 60 requests per minute from one IP address.
Recommendations for safe use
- Allow editing only in tools you actually use to work on the manual. Reading is enough for questions.
- Every now and then, go through MCP connectors and revoke apps you no longer use.
- Before a bulk change, ask the agent to list what it will change.
- Check the result in the browser, especially pages read by external partners.