mirror of
https://github.com/jjbrunton/Sauci.git
synced 2026-10-31 18:19:43 +00:00
jjbrunton
006761d3b0
Replace the Supabase application data plane with the Node/PostgreSQL API, migrate mobile, admin, web, and MCP callers, add controlled cutover tooling, and define hardened Dokploy infrastructure.
13 lines
637 B
Markdown
13 lines
637 B
Markdown
# Internal MCP service
|
|
|
|
Hono service exposing privileged administrative tools.
|
|
|
|
- Treat `SAUCI_ADMIN_API_TOKEN` and `SAUCI_MCP_API_KEY` as secrets. MCP must
|
|
never receive a Supabase service-role key or a direct database credential.
|
|
- Fail closed when MCP authentication is missing outside explicit local mode.
|
|
- Every mutation validates inputs, authorizes the operation, and writes audit
|
|
evidence where the product contract requires it.
|
|
- Read operations preserve least privilege and avoid excessive user data.
|
|
- Add unit/API coverage for tool contract or auth changes.
|
|
- Verify lint, tests, typecheck, build, and `/health` locally.
|