Personal access tokens
Scoped programmatic access
A personal access token lets a program act as you. It connects an agent to MCP context delivery with the context.read scope, and sets up evidence capture with a capture-only token that holds just runs.write.
Access and handling
Treat any token as a secret, grant only the access needed and revoke it when no longer required. Never paste credentials into a public issue or documentation request.
For capture, use a separate capture-only token rather than one with broader access. Paste it when the installer asks for it, never on the command line. The installer uses that token only with the one server it was set up for.
The detailed edition explains the setup and its boundaries. Contact us for the MCP endpoint address before configuring a client.
Something here wrong, missing or out of date? Tell us at support@orneos.com — corrections to these pages are welcome and we would rather hear it than have you work around it.