MCP scopes
MCP users are granted scopes when the MCP user is created or edited. The scopes you pick when creating an MCP user determine which MCP tools the connected AI tool is allowed to call.
| Scope | Access | Resource |
|---|---|---|
| mcp:articles:read | Read | Articles (and related inventory tools) |
In addition, the special offline_access scope can be requested so the authorization server issues a refresh token alongside the access token, which lets a long-running MCP client obtain new access tokens without repeating the full authorization flow.