MCPs and scopes
What an MCP URL is in agorá's model and how scope is enforced.
An MCP URL in agorá is a credential and a scope at once. Provisioning a URL declares a single workflow as the only thing that URL can invoke. There is no shared catalog endpoint and no ambient capability.
Scope rejection
If a client tries to invoke a workflow other than the one the URL is scoped to, the harness rejects the request and records the attempt with a scope.violation event. The rejection is structured — the assistant sees a typed error, not a 500.
Rotation
Rotating a URL invalidates the previous one immediately. The new URL is the same scope unless you change it explicitly. Rotation is the right response to leakage, role changes, or any time you want the previous URL to stop responding before the next billing cycle.
What gets logged
- The originating client identifier the assistant declares (Claude Desktop / ChatGPT / Cursor).
- The workflow slug, the step the harness was at, and the turn count.
- Confidence per classifier decision and the resulting routing call.
- Escalation triggers, if fired.