Use AI → MCP to configure tools that the AI assistant and built-in MCP server can call on behalf of a user.
Access to AI is controlled by the global view:ai-page permission. Separate global read: and edit: permissions control MCP server, tool, and collection configuration. For details, refer to the role model.
Overview
| Section | Purpose |
|---|---|
| MCP servers | Connect upstream MCP servers and synchronize their tool catalogs |
| MCP collections | Group tools and control user access |
| MCP tools | Create custom MCP tools without an upstream MCP server |
| Catalog | View all available tools |
The AI assistant displays the following tool types:
internal— Built-in portal tools described in the MCP server documentation.external— Tools retrieved from a connected upstream MCP server.custom— Custom MCP tools.
Tools of the external and custom types can be called only if they belong to an enabled MCP collection available to the user.
MCP servers
Connect an upstream MCP server to import its tools into the portal catalog.
- Go to AI → MCP → MCP servers.
- Select Connect.
- On the Main information tab, specify Name, Identifier, Description, Owner, and Owning team.
- On the Config tab:
- Enable the Enable toggle.
- Select a Transport:
HTTPorSSE. - Specify the upstream MCP server URL.
- If necessary, add Headers and Credentials for authentication.
- Select Save.
After saving, open the server card and select Synchronize to load the tool catalog. On the Tools tab, enable the required tools and add Tags if necessary.
MCP tools
Create a custom MCP tool that the AI assistant calls directly without an upstream MCP server.
- Go to AI → MCP → MCP tools.
- Select Add.
- On the Main information tab, specify Name, Description, Owner, Owning team, and Tags.
- On the Config tab:
- Enable the Enable toggle.
- Define the Input schema as a
JSON Schemawith the root typeobject. - If necessary, specify Path mapping as a
JSONobject that maps argument names to{placeholder}segments in the executor URL. - If necessary, specify Query mapping as a
JSONobject that maps argument names to URL query parameter names. - If necessary, specify Body mapping as a
JSONobject that maps argument names to JSON request body field names.
- On the Authorization tab, specify the executor endpoint URL, HTTP method, Headers, and Credentials. The URL can contain
{placeholder}segments for path parameters and credential placeholders such as{{ .credentials.tenant_id }}. - Select Save.
For example, assume the input schema defines the space_id argument, the executor URL is https://api.example.com/v1/spaces/{spaceId}/boards, and the path mapping is {"space_id": "spaceId"}. If the tool is called with space_id=42, the request is sent to https://api.example.com/v1/spaces/42/boards.
Arguments are passed to the executor endpoint as follows:
- Path mapping and query mapping apply to all HTTP methods. Only arguments listed in Query mapping are added to the URL as query parameters.
- For
GETandDELETE, the request body is not sent. Arguments that are not listed in Path mapping or Query mapping are not passed. - For
POST,PUT, andPATCH, the JSON request body is built from Body mapping. If Body mapping is empty, the body contains all tool arguments, including the ones used in the path and query. If Body mapping is set, the body contains only the mapped arguments.
MCP collections
An MCP collection groups catalog tools and determines which tools are available to AI assistant users and external MCP clients.
- Go to AI → MCP → MCP collections.
- Select Create.
- On the Main information tab, specify Name, Identifier, Description, Owner, and Owning team.
- On the Config tab:
- Enable the Enable toggle.
- Under Tools, select tools from the available catalog. Each item includes the MCP server identifier in parentheses.
- Select Save.
To let a user call collection tools, open the collection card menu and select Edit role bindings. Assign users or teams a role with the use:mcp-collections permission. For the permission list, refer to the role model.
The collection owner and super administrator automatically receive access to the collection.
Catalog
The Catalog section displays all tools available to the current user based on MCP collections and access permissions. This section is read-only. Edit tools on the MCP servers, MCP tools, and MCP collections pages.
Integration with the AI assistant and MCP server
Tools from MCP collections are used as follows:
- In the AI assistant, Available tools displays built-in tools and tools from available collections.
- The portal MCP server returns and calls the same collection tools available to the user based on their RBAC permissions.