{"path":"/guide/how-it-works/security","content":{"title":"Security and ownership","summary":"What anonymous readers and their agents can access, and how public content stays separate from private state.","breadcrumbs":"[Everything guide](/guide) / [How Everything works](/guide/how-it-works)","body":"Everything lets humans and AI agents read published pages without creating an account. The public web, JSON and MCP interfaces expose eligible content and bounded discovery operations.\n\n## The public boundary\n\nA public reader can follow page routes, list public pages, search the wiki and discover related articles. They cannot select an arbitrary private storage collection, inspect unpublished drafts by asset ID or download raw private source definitions.\n\nThe MCP protocol distinguishes read-only public operations from restricted maintenance capabilities. Discovering a restricted tool name does not grant permission to call it. Editing and administration are authorised separately by the service, not just hidden in the interface.\n\n## Content is data, not code\n\nPage and template content is interpreted through a constrained rendering format. The renderer escapes output, disables raw Markdown HTML, restricts unsafe links and does not execute uploaded template code. Public media must be eligible for public access and referenced from an eligible page.\n\nTemporary publication inconsistencies are treated as repairable content state, but never as a reason to bypass access controls. Read more in [How public visibility works](/guide/reading/visibility) and [The tag model](/guide/how-it-works/tag-model).\n\nFor practical guidance when connecting an AI client, see [Access and privacy for visitors](/guide/getting-started/connect-agent/access-and-privacy).","navigation":"[How Everything works](/guide/how-it-works) · [Access and privacy](/guide/getting-started/connect-agent/access-and-privacy)","related":[{"title":"Access and privacy for visitors","url":"/guide/getting-started/connect-agent/access-and-privacy"},{"title":"How public visibility works","url":"/guide/reading/visibility"},{"title":"The tag model","url":"/guide/how-it-works/tag-model"}]}}