# Security

> OAuth 2.1, live role clamping, audit logging, rate limits, and instant revocation.

Product: Clad MCP
Source: https://docs.useclad.ai/mcp/security

---

The MCP server inherits the API's security model and adds OAuth on top.

- **OAuth 2.1** — PKCE (S256), dynamic client registration, refresh-token
  rotation with reuse detection, and RFC 8707 resource audiencing.
- **Live scope clamping** — every request re-checks the authorizing user's
  current role; lost permissions apply immediately to existing tokens.
- **Least privilege by construction** — the tool list is scope-filtered, and
  destructive / credential operations are not exposed at all.
- **Audit logged** — every MCP mutation records the acting credential (which
  agent, on behalf of which user).
- **Rate limited** — both the MCP endpoint and the OAuth routes are rate-limited
  per credential and per IP.

Instant revocation: disconnecting an agent in **Settings → MCP → Connected
agents** revokes its access token and refresh token immediately.