01
Verifiable controls
- Account and project isolation.
- Credentials with read and write scopes.
- Permissions limited by subscription, module, and provider.
- Human approval for sensitive operations.
- Provider credentials encrypted at rest, auditability, and revocation.
- Public commercial MCP without customer data.
