NASQuay puts a single permission gate in front of QNAP operations

Field notes

The application models every operation as a named action with a parameter schema and a read, write, or destructive classification. Web requests, scheduled routines, the embedded assistant, and MCP callers are routed through that same registry, so denied requests are rejected before reaching a NAS and still recorded. QNAP’s MCP Assistant handles the main integration; a fixed allow-list of SSH commands covers readings it cannot provide. Monitoring also compares independent NAS views to catch disagreement.