An app that signs in through Saddle rather than using a pasted key was always granted read-only access, whatever you had set on the Permissions screen, and nothing could change it afterwards. ChatGPT is the one that signs in this way. You now choose the access level on the approval screen, and can change it later from Saddle, then Connect.
On hosts that rewrite request bodies, saving your access level could report success and quietly change nothing.
Improved
Permissions now names any connected app sitting below the level you chose, instead of leaving you to work out why an app you granted full access still refuses to write.
Note
After changing what your apps may do, refresh or reopen the app to pick up its new tools. No app notices on its own.
Some apps, ChatGPT connectors in particular, signed in and then reported that the site had no actions they could use. Saddle now serves apps that do not hold a session between requests. If you hit this, delete the connector in your AI app and create a new one, because most apps ask for the tool list once and remember the answer.
New
Client traffic, under Connections. Records what a connected app asked for and what it got back, so “it says it cannot see any tools” can be answered without guesswork. Off by default, stops after an hour, and records no keys or content.
Improved
Tools now tell an app what they do before they run: a readable name, and whether a tool only reads, can destroy anything, or is safe to repeat.
A refused tool call returns its reason as a readable answer instead of a protocol error, so your assistant can tell you which control to change.
Saddle no longer bundles the MCP Adapter library. It speaks the protocol itself, at the same address, with the same tools and the same safety model. If you have the separate MCP Adapter plugin active, Saddle uses it automatically.
Security
Your active plugins and theme name are shared with an AI only at the highest access level, matching the level already needed to list them. The connection handshake also respects the pause switch.
Read your block templates, template parts, global styles and saved patterns, not just one page at a time.
Set up a starter design system on a block theme. The palette, type scale and spacing are written into your global styles where the Site Editor reads them. Existing values are never overwritten.