Vault Health & Permissions
Keep your knowledge easier to retrieve and your agents' access deliberate. Vault Health helps you notice disconnected pages and operational issues; Permissions controls the supported capabilities agents may use against your vault.
Together they help you improve the workspace while deciding how much authority to give the tools connected to it.
Review vault health on Mac
Open Agents → Vault Health in the Mac app. Use the report to identify pages and recent operational signals worth inspecting, then open the relevant page, activity, or proposal.
The health overview draws on recorded vault structure and agent activity. Its score is a compact signal, not proof that every page is accurate, current, fully linked, or free of broken references.
Start with disconnected pages
The mindwiki_lint tool reports pages without recorded incoming or outgoing links, excluding certain index or app-managed pages. It returns the number of pages checked and the matching orphan-page issues.
An orphan is a candidate for review. A new capture, private working note, or independent reference may be useful on its own. Link a page when the relationship helps you or an agent find the right context.
Run a MindWiki health check. Read a few disconnected pages and suggest useful links to existing projects or sources. Explain the relationship and leave changes for review.This tool is an orphan check, not a universal broken-link, factual-accuracy, duplication, or security scanner. The broader Agents workspace also helps you inspect pending proposals, recent errors, and session activity.
Turn a finding into a useful improvement
- Link a source from the project that uses it.
- Add a clear title or a short explanation to an ambiguous capture.
- Review a proposal that has been waiting for a decision.
- Investigate a failed write rather than repeating it blindly.
- Refresh a project brief or Context Pack when the work changes.
Prefer a meaningful connection over adding links merely to raise a score. See Wikilinks & Backlinks and Knowledge Graph.
Understand the two access layers
Connection scope sets the operations authorized for a credential. Vault agent permissions enable or disable supported capabilities for the account. Both apply.
| Credential access | Intended use |
|---|---|
OAuth mcp:read | Retrieve and inspect supported knowledge. |
OAuth mcp:capture | Read and add inbox captures. |
OAuth mcp:write | Read, capture, and supported page and folder writes. |
OAuth mcp:operate | The above plus plan-eligible advanced workflows. |
API key read | Retrieval from scripts or compatible integrations. |
API key write | Supported mutations from scripts or integrations. |
Legacy OAuth mcp grants include read, capture, and write. MCP Tools explains plan availability and operation scopes.
Set capability permissions
In Agents → Permissions, review the account's controls:
| Control | What it governs |
|---|---|
| Read vault | Supported search, page reading, and retrieval tools. |
| Direct write | Supported captures, page writes, and index updates. |
| View activity | Supported activity and session inspection. |
| Destructive actions | Operations subject to the separate destructive-action gate. |
These are account-level capability controls. Folder names, pinned properties, and written instructions leave access governed by server-enforced permissions. The Mac app may also display controls for historical Context Pack and proposal workflows.
Choose the least authority the workflow needs
Use retrieval access for an agent that only needs to answer questions. Add capture when you want it to save new inbox notes. Grant broader writing for clients that should maintain project pages.
Create a separate scoped API key per script. For OAuth, choose an available access level on MindWiki's authorization page. To change an existing grant, revoke it and reconnect with the intended access. Manage grants in Connections and API credentials in API Keys.
Owner actions
Review existing proposals in the MindWiki Mac app. The Proposals guide describes queue review and what approval can apply. An agent can file a recovery request. Use your owner website session and Access Keys to complete account-security tasks.
Next: Sessions & Activity, Proposals, and MCP Tools.