Manage topic access
manage_user_accessGrant or revoke an account's access to ntfy topics. Choose read-write, read-only, write-only permissions, or deny/revoke rules to manage topic visibility.
Instructions
Sets or removes an account's access to a topic or topic pattern. Requires an admin account and a confirmation token.
Destructive in both directions, which is why it is gated: taking access away breaks a running publisher, and granting it exposes a topic's traffic to another account.
A pattern may end in "*" to cover a family of topics. "deny" writes an explicit refusal — the only way to carve an exception out of a wildcard grant — whereas "revoke" removes the rule entirely, so a broader wildcard or the server default applies again.
Where NTFY_TOPICS restricts this server, the topic must be one of its entries and a wildcard is refused: a pattern covers topics that are not on that list.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| topic | Yes | A topic name, or a prefix ending in "*". | |
| action | Yes | read_write, read_only, write_only, deny (explicit refusal), or revoke (remove the rule). | |
| username | Yes | The account to change. | |
| confirm_token | No | The token from this tool’s previous, unconfirmed response. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| topic | Yes | The pattern, after NTFY_TOPICS resolved it. | |
| action | Yes | ||
| username | Yes | ||
| permission | No | What ntfy stored. Absent on "revoke", which stores no rule. |