May 20, 2026

Added

• Mint, list, and revoke scoped, revocable API tokens to authenticate with the API and CLI.
• MCP tools now enforce token scopes, so a read-only token can no longer perform writes.