Least-privilege agent fleets

Give every agent its own bearer token against a single /mcp endpoint. tools/list is computed per token: a research agent may see only knowledge_search; an authoring agent also sees write tools. No agent can call a tool it was not granted.

Register Jira, GitHub, and internal MCP servers as upstreams. Synamcps namespaces their tools and re-exposes them behind the same ACLs and rate limits, with upstream credentials encrypted at rest — one connection for the whole fleet.

Provision short-lived tokens with toolAllowlist, storageIds, and burst limits. Rotate or revoke via /tokens/{id}/rotate and /revoke when a run ends or a key is suspected leaked. Misbehaving loops get 429 instead of hammering downstream systems.

Write-back agents can persist findings as group-visible knowledge within their write scope, feeding the next retrieval cycle. Non-technical teammates use the MCP Connect wizard for copy-paste Cursor or Claude config without platform tickets.