Scope MCP and tool access per end user

Revocable sessions. Identity and policy travel with every call.

Deploy a company Read the docs

connectionsOAuth

$ naive connections connect gmail --user usr_8f3k

Connected services7

vault-backedauto-refresh

per-user scope

AgentAGT-7F3K

Stripelinked

Vercellinked

Supabaselinked

GitHublinked

Slacklinked

Gmaillinked

Notionlinked

Per-user scope3 users

usr_8f3kfounder7 linked

usr_2a1bmember3 linked

usr_9c4dmember1 linked

tokens vaulted

Paste and ship

Drop this into Claude Code, Codex, or Cursor. It reads the docs and wires up MCP sessions for you.

Agent prompt

Read https://vetta.sh/docs/api/mcp and use the naïve MCP sessions primitive in my project. It is part of the gateway layer; wire it through naive.config.ts rather than calling a vendor directly.

Related primitives

Approvals

gateway

Human-in-the-loop at the tool boundary. Risky calls freeze until someone decides.

Vault

gateway

Credentials the agent uses at runtime and never sees in the prompt.

Jobs

gateway

Every async job in one list: renders, formations, deploys.