How are access permissions handled?

We work together to define which MCP capabilities the customer needs. We ask about the desired workflow and provide a technical recommendation. Access is then designed to suit the project: individually per user or through a shared account with defined permissions. Our MCP interfaces generally use bearer tokens linked to permissions. Depending on the task, anonymising or reducing the data may also be appropriate. In our requirements application, we have implemented individual user permissions with Keycloak and a separate token for each user.

MCP and permissions