MCP Tools Settings

All settings on this page are located at Stores -> Configuration -> Mirasvit Extensions -> MCP Tools.

For general settings, security, authentication, and logging, see the Settings page.

tip

To apply changes, clear the Magento cache after modifying these settings.

Database Reader

Query Timeout (seconds): maximum execution time for SQL queries. If a query exceeds this limit, it is terminated. Valid range: 1–300 seconds. Default: 30.
Table Access Mode: defines how the table patterns list is interpreted.
- Blacklist (default): tables matching the patterns are blocked. All other tables are accessible.
- Whitelist: only tables matching the patterns are accessible. All other tables are blocked.
Table Patterns: one pattern per line. Use * as a wildcard (e.g., sales_*, customer_entity).
Include Default Security Blacklist: enables a built-in list of patterns that block access to sensitive tables (admin credentials, OAuth secrets, sessions, etc.). Default: Yes.
Default Blacklist Patterns (read-only): displayed when the default blacklist is enabled. Shows all built-in patterns that protect sensitive tables.

For details on how table access control works, see the Database Reader page.

The Cache Manager tool has no store settings. Its actions are governed by the role's core Cache Management permissions — see the Cache Manager page.

Allow Index Invalidation (Yes/No, default No): controls whether the Indexer tool's invalidate action is available. When No, the tool is read-only. When Yes, the invalidate action becomes available to roles that also hold the core Invalidate index permission.

For details, see the Indexer page.

Accessible var/log File Patterns: one file-name pattern per line. Use * as a wildcard (e.g. system.log, *cron.log). When empty, every var/log file is allowed. The var/report directory is always accessible and is not affected by this list. The shipped default patterns are system.log, debug.log, exception.log, and *cron.log.

For details, see the Log Reader page.

Allow writing to media storage (Yes/No, default Yes): set to No to make the Media Upload tool read-only. The AI client can still list existing media so it can reference it, but cannot upload or delete.
Additional allowed file types: extensions to accept beyond the images Magento itself accepts (jpg, jpeg, png, gif) — for example pdf, csv, xml. Entities with their own file-type list, such as the product gallery, are unaffected.

For details, see the Media Upload page.