Tool Visibility

tool visibility a connected assistant can see every tool the nue mcp gateway federates — well over two hundred of them across lifecycle, pricing, billing, admin, commerce, and docs most people need a fraction of that tool visibility lets an administrator decide which tools each role sees, so a billing analyst's assistant offers billing work and a sales engineer's offers quoting, without either being handed the whole surface area tool visibility is governed entirely by the roles of the signed in user there is no separate mcp permission model to maintain and no api for changing it — an administrator manages it from the nue ui, and what any given assistant can see follows from the roles its user holds this is a discovery control, not a security boundary hiding a tool removes it from what the assistant can find and call through the gateway it does not change what the underlying apis allow — every call the gateway dispatches is still authorized by the nue api against the caller's own permissions how visibility is decided visibility is derived from the permissions a role already has every mcp tool declares the api resources it uses, and a tool is visible to a role only when that role's existing api grants cover all of them nothing about tool visibility grants api access on top of that derivation, an administrator can hide specific tools from specific roles overrides only ever subtract state meaning can an administrator change it? visible the role has every api permission the tool needs, and no one has hidden it yes — it can be hidden hidden the role has the permissions, but an administrator has hidden the tool from this role yes — it can be made visible again not permitted the role is missing at least one api permission the tool requires no grant the permissions on the roles page first why you cannot force a tool to be visible there is no "always show" override, by design showing a tool the role has no api permission for would produce an assistant that offers an action and then fails on it, because the api layer would reject the underlying call fixing that means granting the permission on the roles page — at which point the tool becomes visible on its own managing visibility in nue tool visibility is managed per server, from the mcp servers settings page the mcp servers settings page, with the tool visibility action on each server row go to settings → mcp servers on the row for the server you want to manage, choose the tool visibility action the tool visibility drawer for nue lifecycle manager, listing each tool and the roles it is visible to the drawer lists that server's tools select a tool to see its roles, and toggle a role between visible and hidden the role dialog for a single tool roles with the required api permissions can be toggled; a role without them is locked and explained roles missing a required api permission are shown locked, with an explanation — those are changed on the roles page, not here in the role dialog above, four roles can see createnewquote and can be toggled e signature user is locked, with the reason given inline — that role is missing an api permission the tool needs, so it is changed on the roles page rather than here managing visibility requires the manage mcp tool visibility permission administrators without it can still use the mcp servers page but will not see the action what the default roles can see because visibility follows api permissions, each of the standard roles arrives at a working tool set without anyone configuring one the shape of each is summarised below role what its assistant can do e signature user the narrowest set, and almost entirely read only look up customers, subscriptions, assets and entitlements; read invoices and credit memos; list and read documentation its one workflow is signatures — preview a quote for e signature, send it, and check signature status sales representative the quoting role create and change quotes and orders, edit quote lines, apply price tags, generate quote and order documents, and manage opportunities reads customers, subscriptions, renewals and product pricing sees a small slice of billing — mostly invoice and credit memo reads — and can inspect pricing plugins without editing them finance operations manager the billing role nearly all of billing & collections invoices, credit and debit memos, payments and payment rules, billing schedules, usage rating, and the crm sync jobs reads customers and subscriptions, sees part of the lifecycle surface, and holds a few tenant settings tools revenue operations manager the broadest non admin role most of what finance operations sees on the billing side, plus deeper reach into the lifecycle and pricing surfaces — quoting, price tags, product publishing, and most of price builder, including authoring and testing pricing plugins system administrator everything all servers, including the tenant configuration, import/export and registry tools that no other role sees every role also sees all of nue docs — searching and reading documentation is available to everyone this table describes the roles as they ship because visibility is derived from api permissions, changing what a role can call on the roles page changes what its assistant sees — so a customised role may look quite different from the summary above what a user experiences when a tool is hidden from every role a person holds, their assistant behaves as though the tool does not exist it is absent from the tool list the assistant loads when it connects; it is not returned by tool search , so the assistant will not propose it; and a direct call is refused by the gateway before it reaches the server visibility is resolved when an assistant connects , so a change takes effect in the next session rather than the one already open ask the user to reconnect if they need it sooner things worth knowing visibility is per tenant hiding a tool in one tenant has no effect in any other, and a role in one tenant cannot be named from another hiding survives a permission change if you hide a tool from a role that cannot currently use it, and the role is later granted the missing permissions, the tool stays hidden until you unhide it if visibility cannot be determined, nothing is hidden should visibility be briefly unresolvable, assistants keep their full tool list rather than losing access mid session discovery degrades open; authorization does not — the nue api still checks every call against the user's roles related nue mcp servers overview docid\ hoezwahqtpnythyko9bifconnecting to nue mcp docid\ h6afi jeh6817ew0vd13w