Scope MCP and tool access per end user

Revocable MCP sessions — identity and policy travel with every call.

Get your API key Read the docs

audit log$250 cap

10:14cards.createAllowed
10:22payment.chargeAllowed
10:23payment.chargeRevoked

Paste and ship

Drop this into Cursor, Claude Code, or any agent. It reads the skill manifest and wires up Sessions for you.

Agent prompt

Read https://usenaive.ai/skill.md and use the Naïve Sessions primitive in my project. Start with: naive sessions create

What you get

MCP transportSSE endpoint per scoped session.

Tool allow-listsOnly permitted primitives per user.

Zero standing accessNo shared keys across tenants.

Kill mid-flightRevoke sessions while agents are running.

One call to sessions

CLI, SDK, or REST — one bearer token, one credit balance.

CLI

Sessions

Hand agents a scoped tool surface per end user without sharing your master API key. Kill any session instantly; allow-lists enforced at the transport layer, including MCP and delegation chains.

MCP transport

SSE endpoint per scoped session.

Tool allow-lists

Only permitted primitives per user.

Zero standing access

No shared keys across tenants.

Kill mid-flight

Revoke sessions while agents are running.

# Run with your API key exported
$ naive sessions create

Related primitives

Vault

Per-user encrypted credentials — retrieved at runtime, never in prompts.

Approvals

Human-in-the-loop enforcement at the primitive boundary.

LLM

Chat completions across 300+ models through one router.

Start building with Sessions

Get your API key Read the docs