Hi team, can you confirm that if I enter a sharepoint subsite, the read/write perms are scoped only to that subsite and not everything else? I entered a subsite but my sharepoint read tools are still able to read content outside the specific subsite. Can you check this for me? https://cdn.discordapp.com/attachments/1501664742379491338/1501664742912299048/Screenshot_2026-05-06_at_3.18.16_PM.png?ex=69fce5c6&is=69fb9446&hm=6ab026cd115ed62c7b47d9e1e8e6814a3903010111db7bd8bc250074e327be34&

Hi @roberto, Thanks for flagging this, and apologies for the friction during the security review. To answer directly, the "SharePoint Subsite" field on the connection screen does not act as a hard permission boundary. It's a default that tells our SharePoint tools which site to target when the per-call site_name parameter is left blank. The OAuth token issued by Microsoft still carries whatever tenant-level access the consenting user has, which is why your read tools can reach content outside the subsite you entered. Lmk if this helps!

Thanks for the response Uday, understood