WAVE CODE

Wave Code product guide

Connect tools with permissions suited to your task

Understand MCP connections, read and write permissions, and how to troubleshoot a tool that is not available to the agent.

What a tool connection provides

MCP connections give an agent specific operations exposed by a service, such as searching documents or creating an issue. Selecting a plugin in the interface does not necessarily mean its tools are ready: the provider may still require sign-in, workspace access, or additional approval. Available providers and operations can change.

Start with the access you need

For a search or summary, choose read-only access where offered. Use write access when your task actually requires changing a record or creating content. Review the provider's consent screen and the workspace being connected. The exact permissions and available choices depend on the provider and integration; do not assume every connector supports the same read/write split.

Try a bounded task first

Start with a request such as “Find the project notes I can access and list their titles.” Once you confirm the right workspace and results, ask for the next step. For write operations, name the destination and intended change. Avoid an open-ended instruction to modify all documents or issues in an account.

If the agent cannot see a selected tool

  1. Check that the connection is enabled and the provider sign-in finished.
  2. Confirm that the connected account can access the intended workspace or document.
  3. Read any requested permission message; only approve access needed for the task.
  4. Reconnect if the provider says the authorization expired or changed.
  5. Retry the saved request or start a small test request. Do not treat a model's guess about the connection as proof of provider success.

Handle tool results carefully

Documents and webpages returned by tools are external content. An instruction inside a document asking the agent to reveal credentials or change its rules is not permission from you. Review changes before publishing, sending messages, or sharing files with other people.

Get help with a connection

Send support the provider name, the error text, when it occurred, and which type of operation failed. Remove access tokens, authorization codes, and private document contents. Never paste a full OAuth callback URL into a public issue.