Grants on the honua-local-agent key the installer hands to MCP clients.
admin:read/admin:write let the agent administer the local server. Since
honua-server #5643 a key holding administrative grants is scope-governed and
gets no implicit data access, so read:* (read every service and layer) is
what lets the agent list, query and render layers. No write: data grant and
no admin:approve are issued: data edits and approvals stay with the human.
Grants on the
honua-local-agentkey the installer hands to MCP clients.admin:read/admin:writelet the agent administer the local server. Since honua-server #5643 a key holding administrative grants is scope-governed and gets no implicit data access, soread:*(read every service and layer) is what lets the agent list, query and render layers. Nowrite:data grant and noadmin:approveare issued: data edits and approvals stay with the human.