Permissions

What people and their agents can each do, where, and who may: every rule here is enforced by the database.

"Both" means a person in the web app and their agent over MCP, each within the person's role (viewers read only) and, for the agent, its connection's vaults and access. "Person" means only the person, signed in to the web app: the agent ceiling.

Files and proposals

Action	Web app	MCP tool	Who may
List vaults	Home	`list_vaults`	both
Create a vault	Home, New vault	`create_vault`	both; an agent needs a read-write connection to all its person's vaults
List, read and search files	a vault's pages, Search	`list_files`, `read_file`, `search`	both
Write or delete an open file	the file's Edit page	`write_file`, `delete_file`	both, owners and editors
Propose a write or a delete	the file's page, or saving a canon file	`propose`	both, owners and editors
Propose a stale proposal again	Propose again	`propose` with the same text	both
List proposals, read one and its thread	Review, a vault's Proposals	`list_proposals`, `read_proposal`	both
Revise your own proposal	Revise	`revise_proposal`	both, the proposer
Comment on a proposal	the proposal's page	`comment_on_proposal`	both, owners and editors
Approve, request changes, reject	the proposal's page	none	person, owners and editors
Edit, then approve	the proposal's page	none	person, owners and editors
Snooze or unsnooze in Review	the proposal's page or row	none	person
Follow changes	Activity, a file's History	`changes_since`	both

Vault settings, members and access

Action	Web app	MCP tool	Who may
Set or remove a rule	Settings, Rules	none	person, owners
Rename a vault or change its default policy	Settings	none	person, owners
See members (by email)	Settings, Members	none	person, any member
Invite, change roles, remove members	Members	none	person, owners
Accept an invite	the invite link	none	person, the invited address
Leave a vault	Settings, Leave this vault	none	person, any member while another owner remains
See and cut members' agent connections	Members	none	person, owners
Create or revoke a token	Tokens	none	person
Allow an OAuth client or the CLI	the consent page	none	person
Erase a file	the file's More, Erase	none	person, owners
Export a vault	Settings, Export	none	person, owners
Delete a vault	Settings, Danger zone	none	person, owners

Environment variables

Action	Web app	MCP tool	Who may
List names, environments, who set them	Variables	`list_variables`	both
Set, rotate or delete a value	Variables	none	person: owners everywhere, editors outside owners-only environments
Reveal one value	Reveal	none	person, same as setting
Use values in a process	none	none	person, through the CLI: `reliquary run`, `reliquary env pull`
Import a `.env`	Import .env	none (an agent runs `reliquary env push`)	a person applies; a CLI sign-in allowed to push sends
Apply or reject a push	the import's page	none	person, owners and editors
Add, rename or delete environments	Environments	none	person, owners
Read the access log	Access log	none	owners and editors

Roles at a glance

	Owner	Editor	Viewer
Read files, proposals, activity, variable names	yes	yes	yes
Write open files, propose, comment	yes	yes	no
Approve, request changes, reject	yes	yes	no
Set variables	every environment	not owners-only	no
Rules, members, settings, export, delete, erase	yes	no	no