Building a read-only MCP server where a connector token can never become a login

Our auth hook treats any Bearer token as a session. How a separate HMAC domain, a credential swap and per-call grant checks keep an MCP connector read-only.

Read Original

Related