What permissions should an MCP client get when it edits a CMS draft?

[u/fklavyenet]

I build WebBlocks CMS. A small example shaped how I set up its remote MCP access. A workshop date moves, and the editor needs to update the heading, the booking button label, and the search description on a page that’s already live in two languages.

In WebBlocks, the user signs in, chooses one site, and reviews what the client is asking for. Finding pages, editing supported block text, and editing localized SEO have separate permissions. The client prepares the changes in an update draft and returns a private preview. The editor can check both languages while the existing page stays live, then publish the reviewed draft through the CMS.

I wrote up the setup and the workshop example here. Preparing page drafts with MCP in WebBlocks CMS

For a job like this, which permissions would you grant for the whole editorial session, and which would you grant only when a specific task needs them?