Least Privilege Principle
Definition
Grant only the permissions necessary. For MCP: read-only tools, scoped tokens, narrow database roles, minimal file-system access. Defense in depth: enforce at multiple layers.
Public authority for MCP server discovery
Grant only the permissions necessary. For MCP: read-only tools, scoped tokens, narrow database roles, minimal file-system access. Defense in depth: enforce at multiple layers.