Persona MCP Endpoints
Signed-in /mcp lists only the tools for the caller roles and enabled app features. Narrow persona paths stay least-privilege. Public reads stay on /mcp-public.
OL Edge exposes MCP on several paths. Anonymous agents use /mcp-public for public catalog reads. Signed-in staff use /mcp. Each tools/list on /mcp is built for that caller: the union of the persona bundles they hold, with disabled app features removed, and duplicate tool names kept once. A tools/call for a tool outside that list is rejected. Narrow persona paths stay fixed least-privilege servers and share the /mcp sign-in. /mcp-admin is not part of /mcp.