jjbrunton/Sauci
1
0 Fork 0
mirror of https://github.com/jjbrunton/Sauci.git synced 2026-10-31 18:19:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
1f5a939c3fbc74950cc305ced626e1016a16e809
Sauci/apps/mcp/AGENTS.md
T
jjbrunton 006761d3b0 feat(backend): add standalone data plane 
Replace the Supabase application data plane with the Node/PostgreSQL API, migrate mobile, admin, web, and MCP callers, add controlled cutover tooling, and define hardened Dokploy infrastructure.
2026-08-28 14:42:11 +01:00

637 B
Raw Blame History

Internal MCP service

Hono service exposing privileged administrative tools.

  • Treat SAUCI_ADMIN_API_TOKEN and SAUCI_MCP_API_KEY as secrets. MCP must never receive a Supabase service-role key or a direct database credential.
  • Fail closed when MCP authentication is missing outside explicit local mode.
  • Every mutation validates inputs, authorizes the operation, and writes audit evidence where the product contract requires it.
  • Read operations preserve least privilege and avoid excessive user data.
  • Add unit/API coverage for tool contract or auth changes.
  • Verify lint, tests, typecheck, build, and /health locally.
Reference in new issue View Git Blame Copy Permalink