fcf5e6e46f
- Keep PR1 strictly read-only: drop the scope selector, the read_write request rule and mcp:write granting from the UI/controller (the write scope returns with the write tools in PR2). Removes a token that could be minted over-privileged with a false "can edit data" UI promise. - Gate via User::canUseFeature(PlanFeature::McpAccess) instead of hasProPlan() directly, matching the existing feature-gating convention. - Confirm token rotation behind an AlertDialog (it breaks connected clients), matching revoke; drop the silent on-load clipboard auto-copy. - Give the data-egress disclaimer a destructive variant for visual weight. - Extract the duplicated token-ownership check; document the controller-reuse coupling and the shared-tenant space-scoping model; fix ListSpaces N+1 and a duplicate output key. |
||
|---|---|---|
| .. | ||
| Controllers | ||
| Middleware | ||
| Requests | ||
| Responses | ||