---
title: "GET /api/ee/ai-controls/mcp-permissions"
method: GET
path: "/api/ee/ai-controls/mcp-permissions"
tags: ["/api/ee/ai-controls/mcp-permissions"]
---

# GET /api/ee/ai-controls/mcp-permissions

`GET /api/ee/ai-controls/mcp-permissions`

## Request

- Base URL: `` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/ee/ai-controls/mcp-permissions`
- Auth: API key in header `X-API-Key`

List the MCP tool policy of every group, with the tools it can name and the current permission mode.

## Response `2XX`

Successful response

- object
  - `advanced` boolean, required
  - `permissions` object[], required
    - `group_id` integer, required: value must be an integer greater than zero.
    - `mcp_enabled` boolean, required
    - `tool_access` MetabaseMcpPermissionsToolAccess, required: Value must be a map.
  - `tools` object[], required
    - `default_access` 'allowed' | 'denied', required
    - `description` string, required
    - `name` string, required
    - `scope` string, required

## Other responses

- `4XX`: Client error response
- `5XX`: Server error response

## Changes

- **2026-11-04** `2e178f5a7934`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/metabase/apis/metabase-api/changes/api/ee/ai-controls/mcp-permissions/get.md)

---

[API](https://skmtc.dev/metabase/apis/metabase-api.md) - [All operations](https://skmtc.dev/metabase/apis/metabase-api/llms.txt) - [OpenAPI document](https://skmtc.dev/metabase/apis/metabase-api/revisions/2e178f5a7934?raw)