Cookbook

Security

Agents draft. Humans publish. That is a property of the catalog, not a setting.

There is no publish_fix

No scope grants write access to a customer website or CMS. generate_fix returns an outline. A human still publishes it.

Can / cannot

Action	Allowed	Note
Read visibility, citations, competitors, and recommendations	Yes	Always free
Spend checks (run_scan, check_prompt)	Only with scan:run	Quoted first
Change tracked prompts	Only with prompts:write	Changes committed burn
Add a business	Only with business:create on an all-businesses key	Free
Draft schema / FAQ / section copy	Only with business:write	Never publishes
Publish to a website or CMS	No	No publish_fix tool exists
See businesses the key is not allowed to see	No	Selected keys are locked