API keys

Prefixes are visible; hashes are stored.

No user-created keys. The local demo token is limited to development.

Webhooks

At-least-once delivery with event IDs.

No endpoints registered.
Framewise MCP serverTools: project context, source ingestion, research, ideas, generation, review, publication and analytics. Resources expose immutable evidence and version manifests.python -m apps.mcp.server