Least-privilege data scopes — what each agent and person is allowed to see.

Dataset views are the scope MCP clients and agents bind to. A view defines a filtered slice of traffic plus field-level redaction; tightening a view directly constrains what an agent can retrieve.

Views Defined

Scopes available to bind.

All-access Views

Unrestricted — no scope applied.

Agents Bound

MCP clients retrieving via a view.

People Bound

Human principals scoped to views.

Dataset Views

Click a view to inspect its scope.

Scope Definition

ALL (unrestricted)

Unrestricted

marketing-gpt has unrestricted access — no scope applied. This view exposes all traffic with no filter and no redaction.

Filter Definition

dataset* (all datasets)

region* (all regions)

sensitivity* (no restriction)

Bound Principals

Agents2

marketing-gpt

unowned-scraper

People0

No people bound.

Field-level Redaction

No redaction applied — raw fields, tokens, and payloads are retrievable.

Views are the scope MCP clients and agents bind to. Tightening a view — narrowing its filter or enabling redaction — constrains what every bound agent can retrieve, without touching the agents themselves.