Stored credentials
Checking how stored tokens and secrets are protected…
Popular sources
The address and the setup, already worked out. Some connect straight away; others need an app created first, and each says which.
Organization model keys
OpenRouter keys the organization pays for. Scripts use one only on the servers you assign it to.
Call limits for the whole workspace
The most tool calls anything here may make. A server or a source can be stricter, never looser.
Who decides a held call
A rule can hold a call until a person approves it. This says whether that person may be the one whose key the agent used.
Who can do what
Connecting your own account to an MCP server needs nobody's approval — you authorise only yourself, and the credential is stored against your email alone. Registering a source is an admin action, because it puts something in front of everyone. People on a source decides who may use it at all; a server shared with a group still serves each person only the sources they may use.