SECURITY

Project access is explicit and scoped.

Account and MCP requests use the same user identity. Database row-level security limits every request to projects the signed-in user can access.
  • Per-user project access
  • Scoped MCP permissions
  • Short-lived access tokens
  • Optimistic version checks
  • Revocable sessions and links
Create a project