Management door
The management door, https://your-domain/mcp/manage, is a second MCP endpoint through which an agent you authorized — a connected app — reads what you may allow and creates missions in your name; it never executes a tool, never answers a request and never opens a gate.
Connect a client
With Claude Code:
claude mcp add --transport http vaubaan-manage https://your-domain/mcp/manage
# then, inside Claude Code: /mcp → vaubaan-manage → Authenticate
The browser opens on the instance: sign in, read the consent screen, click Authorize. Settings → Connected apps then lists the app; you can revoke it there.
The instance is the OAuth authorization server of this door: clients register themselves (dynamic client registration), and a client that redirects to the loopback interface only — a CLI agent — is approved automatically; any other waits for an administrator on Settings → Administration → Registered apps. The oauth.* keys change these defaults (configuration keys).
What the agent can do there
In this order: list the accounts you may delegate, read a service's permissions and presets, preview a policy until it is valid, then issue the mission. The answer carries the mission key, shown once, and the kit for the agent that will do the work.
- It accepts explicit permissions only, copied from the catalog; no wildcard, never "everything".
- Every accepted permission has a limit per period and a rate.
- A permission outside your authority is refused, with the list of what is not covered.
- You are the creator of every mission it issues, and the mission is marked as issued by that app.
It can also list your missions, stop one, and replace the key of a mission its own delegation issued.
What it cannot do
Answer a request (more of a limit, an approval), open a gate, extend a limit, reset a period, connect an account, give access, or call a provider's tool. A mission key does not open this door, and a delegated token does not open the execution door: the two credentials never cross. Those answers stay with you, in the interface.
Tokens: an access token lasts 15 minutes and a refresh token 30 days by default; a delegation is renewed without asking you again until its absolute lifetime ends (90 days by default). More: the management door handbook.