The OAC November 2026 update release introduces permissions on the MCP server tools. The exact details will be included in the product documentation, but here is an overview.
This is relevant to the ../api/mcp endpoint.
The tool permissions will be initially mapped according to the exisitng OAC application roles and this is the expected change in behaviour:
Consumer - will be able to search the catalog using MCP and get links to workbooks they can access. Will no longer be able to query using MCP. If a custom app role is created based on consumer and adds the permission to schedule workbooks, they will then be able to use MCP to export the workbook to PDF / PNG
Author - able to use all the MCP tools except the workbook export by default. Also requires a custom app role including the schedule workbook permission to export to PDF/PNG using MCP tools.
Admin - able to use the full set of tools.
Mike
