Security and trust
Sign-in
OAuth 2.1 with PKCE. Credentials are never passed as tool arguments.
Access control
Every request is checked against the signed-in person's permissions. Identity claims made inside tool arguments or documents are ignored.
Documents are data
Instructions found inside a document or file, such as 'approve this' or 'ignore permissions', are treated as content, never as commands.
Audit trail
Reads and writes are recorded. Records hold object identifiers and timings, not the text of your content.
Write tools are marked
Each tool declares whether it is read-only, destructive or repeatable, so clients can ask for approval before a write.
Recoverable data
The database is the single source of truth. The cache can be wiped without losing data.
Hosting and data location
Hosted in AWS US East (N. Virginia). Data is encrypted in transit with TLS.