Your project content. Your infrastructure.
Agents read and write your codebase's working memory, so the transport and the storage are the product. Every mechanism below ships in the MIT core — run the managed edge, or deploy the whole thing to a Cloudflare account you own.
- OAuth 2.1 + DPoP
- A full authorization server, so an MCP client connects without a pasted key.
- Scopes deny by default
- Each tool maps to a required scope; an unlisted tool needs project admin.
- Device-level revocation
- Sessions carry a public handle, so a device can be cut off without holding its secret.
- Redaction before storage
- Credential patterns are scrubbed at ingest, not after the fact.
- Per-project rate limits
- 600 requests a minute per project, enforced at the edge.
- Self-host the whole thing
- MIT, and it deploys to a Cloudflare account you own.