# XWiki

> Connect your own XWiki through its MCP server, so assistants can search your wiki and read its pages, and edit them only if you let them.

XWiki is an open-source wiki. Its MCP Server is an extension that your XWiki administrator installs in your own wiki. Once it is there, you connect it to StellarFirm as your own integration, and the assistants you choose can search the wiki and read its pages. If your administrator turns writing on, they can also create and edit pages. Writing is off by default in XWiki.

> [!IMPORTANT]
> XWiki's MCP Server is in beta (version 0.9, July 2026), and XWiki itself says not to use it on a production wiki yet. Try it on a test wiki first.

## At a glance

| | |
| --- | --- |
| Category | Docs and knowledge |
| Used by | The assistants you choose |
| Connects through | [Your own integration](/docs/integrations/your-own) |

## What assistants can do

| Ability | How it runs |
| --- | --- |
| Search the wiki and read pages | Runs on its own, when the server marks the tool as read-only and its name has a reading word and no word for a change |
| Create or edit a page, if writing is on in XWiki | Runs on its own, like any plain change you asked for |
| Anything that deletes or publishes | Waits for your Approve |

Assistants work within the rights of the XWiki user you connect. They cannot see or change anything that user cannot.

## Setup

1. Ask your XWiki administrator to install the MCP Server extension in your wiki, from the Extension Manager. Ask for a test wiki while it is in beta.
2. Open [Integrations](https://stellarfirm.ai/app/integrations), press **Add your own**, and choose **An MCP server**.
3. Give it a name, such as "Company wiki", and one sentence on what the wiki holds. Your assistants read that sentence to know when to use it.
4. Paste the MCP address that the extension's documentation gives for your wiki.
5. Choose how to sign in:
   - **Username and application password**: enter an XWiki user's username and password.
   - Or choose that you sign in to it, if your wiki uses XWiki's OpenID Connect Provider. Your XWiki administrator sets the authentication service to the token-based authenticator for this.
6. Choose who uses it: only you, every assistant, or the assistants you pick.
7. Press **Connect and save**. StellarFirm checks it first and keeps it only once it answers. For a sign-in, press **Sign in** and finish on your wiki's own page.

If the sign-in fails because your identity provider does not let apps register on their own, register an app with the address the page shows, then paste its client id (and its secret, if it has one). The [Your own integration](/docs/integrations/your-own) page has the details.

## Permissions

- Use a dedicated XWiki user with only the rights your assistants need. Never use an admin user or one with programming rights.
- Pages your assistants save are saved under that user's name.
- Approvals follow the rules of [Your own integration](/docs/integrations/your-own). A tool counts as reading only when the server marks it as read-only, and its name has a reading word (search, get, list, read) and no word for a change anywhere in it (create, update, delete, and the like). Creating or editing a page is a change that runs on its own, like any plain change you asked for. Anything that deletes or publishes waits for your Approve.
- To keep assistants from changing pages, leave writing off in XWiki, or give the user edit rights only on the spaces assistants may change.
- StellarFirm reaches only public https addresses. A wiki that is only on your company's own network cannot be connected.
- The password or key is stored encrypted in StellarFirm cloud and never shown back. The username is shown so you can change it.
- Switch it off or remove it at any time. Removing it deletes the password or key at once.

## Prompts to try

```prompt title="Look something up"
Search the company wiki for the onboarding checklist and summarise it in a short list.
```

```prompt title="Draft from the wiki"
Support, find the wiki page about refunds and draft a reply to [customer] based on it. Show me the draft before anything is sent.
```

```prompt title="Check what is covered"
Look in the company wiki and tell me which pages mention our security policy, and which of them were changed most recently.
```

---

Source: https://stellarfirm.ai/docs/integrations/xwiki