v1.3.15Website
•1 min read

MCP Project Authorization Hardening

Remote MCP access now remains bound to an active project membership and enforces project write roles.

#What's Changed

  • [Fix] MCP tokens are revalidated against their project membership before any key operation, including read and reveal requests.
  • [Fix] Stateful MCP key tools now use their authorized project and prevent viewers from changing keys.