---
title: "POST /api/ee/ai-controls/mcp-permissions/advanced"
method: POST
path: "/api/ee/ai-controls/mcp-permissions/advanced"
tags: ["/api/ee/ai-controls/mcp-permissions"]
---

# POST /api/ee/ai-controls/mcp-permissions/advanced

`POST /api/ee/ai-controls/mcp-permissions/advanced`

## Request

- Base URL: `` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/ee/ai-controls/mcp-permissions/advanced`
- Auth: API key in header `X-API-Key`

Switch to group-level MCP tool access. Removes the rows of All Users and All tenant users, so access comes only
   from the rows of the other groups, and enables Data Analysts with every tool at its default when it has no row.

## Response `2XX`

Successful response

- object
  - `advanced` boolean, required
  - `permissions` object[], required
    - `group_id` integer, required: value must be an integer greater than zero.
    - `mcp_enabled` boolean, required
    - `tool_access` MetabaseMcpPermissionsToolAccess, required: Value must be a map.
  - `tools` object[], required
    - `default_access` 'allowed' | 'denied', required
    - `description` string, required
    - `name` string, required
    - `scope` string, required

## Other responses

- `4XX`: Client error response
- `5XX`: Server error response

## Changes

- **2026-11-04** `2e178f5a7934`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/metabase/apis/metabase-api/changes/api/ee/ai-controls/mcp-permissions/advanced/post.md)

---

[API](https://skmtc.dev/metabase/apis/metabase-api.md) - [All operations](https://skmtc.dev/metabase/apis/metabase-api/llms.txt) - [OpenAPI document](https://skmtc.dev/metabase/apis/metabase-api/revisions/2e178f5a7934?raw)