An AI coding assistant gets its own restricted account against your operational store: it can read and change every application and server record an engineer works with, while stored passwords and documents stay closed to it. A fresh assistant fetching a live setting proves the split both ways.
What ports as-is
- A per-grant authorization policy accepted by both a user token and an API key
- Class-level tool authorization removing an ungranted tool from the discoverable list
- Both-direction proof: a positive fetch plus a negative secret test
What we build for you
- Which record types the assistant may touch
