Maurice
4b120d39c8
feat(api): separate API keys from MCP tokens, add travellers
...
An MCP token drives every assistant tool; an API key reads trips over HTTP.
Handing the same credential to a third-party integration gives it the whole
MCP surface, so the two are now separate kinds on `mcp_tokens` and the kind
sits in the WHERE clause — a token of the wrong kind is indistinguishable
from one that does not exist.
Also adds `travellers` to the trip payload: display name and an owner flag,
no ids and no email addresses. An integration key reads its owner's
itinerary; it is not a way to enumerate the people around them.
Documents the surface in the wiki, since integrators need something to read
that is not the source.
2026-08-28 15:23:05 +02:00
..
2026-08-19 23:36:42 +02:00
2026-07-18 22:13:52 +02:00
2026-08-28 15:23:05 +02:00
2026-08-25 15:22:46 +02:00
2026-07-21 13:46:38 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-07-18 22:13:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-11 11:15:32 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 22:54:54 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-27 12:03:04 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-07-18 22:13:52 +02:00
2026-08-25 15:22:46 +02:00
2026-07-19 19:00:40 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-27 12:06:55 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-04-20 10:11:53 +02:00
2026-08-28 14:20:02 +02:00
2026-08-25 12:36:52 +02:00
2026-08-28 14:20:02 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-28 00:56:44 +02:00
2026-08-28 00:56:44 +02:00
2026-08-28 00:56:44 +02:00
2026-08-28 00:56:44 +02:00
2026-08-28 15:23:05 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-28 14:20:02 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-28 14:20:02 +02:00
2026-08-28 14:20:02 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 12:36:52 +02:00
2026-08-25 15:22:46 +02:00
2026-08-25 12:36:52 +02:00