Week 8 · MCP & identity · about 3 minutes
What you will be able to do
Pass the end user's identity on every Helix MCP tool call instead of a shared admin token.
The idea
The MCP server must call downstream APIs as the end user (or a tightly scoped on-behalf-of token).
A shared admin service account bypasses ACL and destroys auditability.
// Bad
servicenow.get(id, { token: ADMIN_TOKEN })
// Good
servicenow.get(id, { token: ctx.userToken })If the call is not as the user, the ACL is fake.
Key takeaways
- No shared admin tool token.
- Forward user identity.
- Audits name a person.
Part of the Forward Deployed Engineer roadmap. New to the role? Start with what a Forward Deployed Engineer does.