Set customer AI connector permissions for one workspace

Platform admins only. Creates or updates the workspace's mcp_workspace_access row with the fields sent (others keep their stored value or column default). AI Connectors are available automatically; availability switches are refused. allowed_roles must be a subset of owner, admin, manager, agent. Quotas are whole numbers within quota_limits. writes_enabled lets the workspace's eligible members confirm changes proposed by the AI (Phase 5): turning it ON is platform-owner only (403 OWNER_ROLE_REQUIRED for an admin); any platform admin may turn it off. 503 MCP_WRITES_NOT_SET_UP when it is sent before migration 20261005f. Workspace owners can never set it. Written with the service-role client; the admin log records the server-built before/after values.

PUT

https://api.channelautomation.com/api/admin/mcp-access/{workspaceId}

Authorization

BearerAuth
HTTP Bearer (JWT)
required

Path parameters

workspaceId
string
required

Request body JSON required

allowed_roles
optional
array of
owner
or
admin
or
manager
or
agent
daily_call_quota
optional
integer
minimum: 0
daily_row_quota
optional
integer
minimum: 0
daily_llm_token_quota
optional
integer
minimum: 0
no_ai_synthesis
optional
boolean
writes_enabled
optional
boolean
Allow confirmed changes (platform owner only to turn on)

Returns

200

{ success, data: row with workspace_name and writes_supported }

400

No fields, or an invalid value

403

OWNER_ROLE_REQUIRED (turning writes_enabled on as a platform admin)

404

Workspace not found

500

Internal server error

JSON

error
optional
string
details
optional
string
success
optional
boolean

503

MCP_ACCESS_NOT_SET_UP, or MCP_WRITES_NOT_SET_UP

curl --request PUT \ --url 'https://api.channelautomation.com/api/admin/mcp-access/<workspaceId>' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data ' { "allowed_roles": [ "owner" ], "daily_call_quota": 0, "daily_row_quota": 0, "daily_llm_token_quota": 0, "no_ai_synthesis": true, "writes_enabled": true } '