- Keep PR1 strictly read-only: drop the scope selector, the read_write request rule and mcp:write granting from the UI/controller (the write scope returns with the write tools in PR2). Removes a token that could be minted over-privileged with a false "can edit data" UI promise. - Gate via User::canUseFeature(PlanFeature::McpAccess) instead of hasProPlan() directly, matching the existing feature-gating convention. - Confirm token rotation behind an AlertDialog (it breaks connected clients), matching revoke; drop the silent on-load clipboard auto-copy. - Give the data-egress disclaimer a destructive variant for visual weight. - Extract the duplicated token-ownership check; document the controller-reuse coupling and the shared-tenant space-scoping model; fix ListSpaces N+1 and a duplicate output key. |
||
|---|---|---|
| .. | ||
| en | ||
| es | ||
| fr | ||
| en.json | ||
| es.json | ||
| fr.json | ||