MCP: Security and permissions

Prompt injection

An assistant can be tricked into calling tools you did not intend. Prefer read-only keys for exploration and review draft writes before publishing in the app.

Drafts only

Write tools create drafts; they do not publish listings or move money.

Revoke access

Revoke a personal key in Settings and it stops on the next request. An OAuth access token that was already issued keeps working until it expires. AuthKit access tokens last 5 minutes.