Docs Claude and MCP
Permissions and tokens
Control exactly what Claude and scripts can change.
When Claude connects, you pick what it may do. You can also make tokens for scripts.
What you can allow
| Permission | Lets it |
|---|---|
| Read content | Read posts and pages, including drafts |
| Write content | Create, edit, publish, schedule and delete posts and pages |
| Read media / Write media | See or upload and change images and files |
| Read schema / Write schema | See or change content types and fields |
| Manage tags | Create and edit tags and categories |
| Manage menus | Create and edit menus |
| Read settings / Manage settings | See or change site settings |
| Export / import | Download a backup, or bring a site in |
| Admin | Everything |
A connection can never do more than the person who approved it. If you're an Author, Claude acts as an Author.
Tokens for scripts
For a script or a tool that can't sign in through the browser, make a personal token in the editor under Settings › Integrations. Send it with every request:
Authorization: Bearer <token>Delete a token there to cut off access straight away.