{"resource":"https://office.mcps.itmindsinternal.dk/mcp","authorization_servers":["https://auth.it-minds.dk/application/o/itminds-mcp-onlyoffice/"],"bearer_methods_supported":["header"],"scopes_supported":["https://office.mcps.itmindsinternal.dk/mcp/mcp.read"],"resource_name":"OnlyOffice MCP server","resource_documentation":"https://office.mcps.itmindsinternal.dk/","dk.it-minds/auth":{"providers":[{"name":"authentik","issuer":"https://auth.it-minds.dk/application/o/itminds-mcp-onlyoffice/"}],"machineCallers":"roles","notes":["Systems only: a system signs in with Authentik, and each tool needs the entitlement named like the tool. People are refused; they use DocSpace itself.","MACHINE_CALLERS must be roles for this server to do anything; with off, every call is refused.","DocSpace is called with this server's own API key, but a system only reaches the team drives (rooms) this server serves AND its token holds an entitlement for: drive:<room>:read, or drive:<room>:write to write where the room allows it. Room entitlements are switched per system in the admin view.","Personal \"My documents\" sections, the trash and rooms outside the allow-list are never read or written. The templates drive is read-only.","Nothing is ever deleted, renamed or moved, and no drive is created or changed.","Every write happens in two steps: a preview first, then the change once it is confirmed with the token the preview returned."],"clients_enforced":true,"clients":[]}}