c.l.cladDocs

Security

View as Markdown

OAuth 2.1, live role clamping, audit logging, rate limits, and instant revocation.

The MCP server inherits the API's security model and adds OAuth on top.

  • OAuth 2.1 — PKCE (S256), dynamic client registration, refresh-token rotation with reuse detection, and RFC 8707 resource audiencing.
  • Live scope clamping — every request re-checks the authorizing user's current role; lost permissions apply immediately to existing tokens.
  • Least privilege by construction — the tool list is scope-filtered, and destructive / credential operations are not exposed at all.
  • Audit logged — every MCP mutation records the acting credential (which agent, on behalf of which user).
  • Rate limited — both the MCP endpoint and the OAuth routes are rate-limited per credential and per IP.

Instant revocation: disconnecting an agent in Settings → MCP → Connected agents revokes its access token and refresh token immediately.