The Tool List Is the Permission Check: Building a Per-User MCP Server with OAuth 2.1
How I put a warehouse system inside Claude and ChatGPT without giving any model more access than the person using it: one MCP server inside the existing API, tools gated at registration, an audience check on every token, and a write ledger for agent retries.