Folio blog: Security & access
Permissions, tokens, groups and single sign-on.
Posts tagged Security & access

MCP security for a wiki: OAuth, tokens and page permissions
What the MCP specification asks of an authorized server, the risks of giving an agent your wiki, and what Folio does: personal tokens, OAuth, the owner's rights and page restrictions, what an agent cannot change, and what the audit log does and does not record.
- AI & MCP
- Security & access

Groups and single sign-on in an open-source wiki: free, in one MIT edition
Sign in through OpenID Connect or SAML 2.0, let SCIM create and close accounts, put people into groups from your identity provider, and restrict pages for child pages to inherit. SSO can be enforced per domain, with an audited admin break-glass and an audit log. What shipped, how it compares and where it stops.
- Security & access
- Collaboration