mcloh/Enterprise-MCP-Service-Bus
1
0
Fork 0
mirror of https://github.com/mcloh/Enterprise-MCP-Service-Bus.git synced 2026-11-06 06:24:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
Enterprise-MCP-Service-Bus/docs/adr/ADR-006-no-token-passthrough.en-us.md
Marcos Lohmann f8d9b6cdcd revisão e complementação da documentação do projeto
2026-09-14 14:54:28 -03:00

569 B
Raw Permalink Blame History

ADR-006: Prohibition of token passthrough

Status: Accepted. Source: this ADR is the canonical record of this decision. For implementation and validation context, see RI/docs/AS-BUILT.md and, where applicable, the relevant contract in RI/docs/interfaces/.

Context

Can the agent's token be forwarded to the backend?

Decision

No — blind token passthrough is prohibited; inbound ≠ outbound identity.

Alternatives Considered

Direct passthrough of the client's token.

Consequences

EP-07 implements exchange/service account per backend.

Reference in New Issue View Git Blame Copy Permalink