Administration

ReadMcpServer does not expose captured request or response bodies. Reading a call log's input, output, or clientIp also requires ReadCustomer.

Which channel the agent works on

Approving an admin consent request binds the client to the channel the dashboard was on at the time. The agent then works on that channel only, and its grant and call logs show up on that channel. An operator looking at a different channel cannot see the grant, revoke it, or prune its log rows.

So switch to the channel you want the agent to work on before you approve. A superadmin who wants the agent to cover the whole store approves while on the default channel.

Registry visibility

The tool-registry query returns the full registry. It is not filtered per caller, so any holder of ReadMcpServer sees every tool.

See also

• Logging & Observability — the call logs and stats these permissions gate.
• OAuth & Consent Integration — the consent requests an operator approves.
• Production Hardening — the go-live checklist for the server itself.

Architecture reviews, custom plugin work, migrations, ongoing support. Get a hand from the team that builds Vendure.