VAROSYAN LLCGlobal Corporate Index

Authentication

How future API credentials and MCP authorization will protect Premium developer access.
In development

API credentials

Keys will be scoped, hashed at rest, rotatable, and visible only when created. They must be stored server-side and never embedded in browser code or URLs.

MCP authorization

Remote MCP access will use OAuth 2.1 with PKCE and resource-bound tokens. Client permissions will be explicit and revocable.