Jakub Zych 8c6c0a3654 feat(19.7-02): identity kinds, ceilings, prompts and the MCP services page ...

- personal tokens only behind mcp.allow_personal_tokens (401 without a
  lookup otherwise); an admin token yields a backend-only identity with
  its scope limit per dispatched method, a user token a frontend-only one
- read/write ceiling and prompts proven by the tracer's subtests; the
  audit line asserted to carry the tool and never the arguments or token
- the mounted *pier.Pier is published on the application (test seams in
  export_test.go)
- docs/services/mcp.md with the tested acme.blog example, site.yaml note,
  cross-links from authentication.md, registration.md and the surf README

2026-10-22 18:34:39 +02:00

6.0 KiB

Raw Blame History

View Raw