Every tool behind the configuration door /mcpconfig has a right of its own. That right is necessary but never enough.
The chain
tool_config_use— the master switch. Without this right the tool list is empty.tool_config_<tool>— one right per tool. Plan and apply each have their own right, so you can let someone look without letting them change anything.- The functional right behind the tool — the very same right the screen uses.
- When writing: both configuration locks must be open. Tools with level 2 are not run on a production environment.
Who holds these rights?
The rights sit in the MCP-Config group, together with the functional rights the tools need. A fresh install gets that group automatically; on an upgraded environment you set it up with the button on Configuration → AI settings → Tools. Either way the group starts without members: adding someone to the group is the step that turns configuring through AI on for that person.
What the tools do is described on MCP configuration tools.
tool_config_content_block_update_plan
Show the intended change of a front block through AI.
tool_config_env_describe
Retrieve environment details through AI.
tool_config_franchise_create_apply
Create a location (franchise) through AI.
tool_config_franchise_create_plan
Show the intended creation of a location through AI.
tool_config_franchise_describe
Retrieve locations (franchises) and their linked products through AI.
tool_config_franchise_set_objects_apply
Link products to a location through AI.
tool_config_franchise_set_objects_plan
Show the intended linking of products to a location through AI.
tool_config_franchise_update_apply
Change a location (franchise) through AI.
tool_config_franchise_update_plan
Show the intended change of a location through AI.
tool_config_homepage_set_apply
Set the homepage through AI.


