Skip to main content

Security controls

This page describes the product controls available to an organisation and the actions they govern.

Identity and authorization​

  • Interactive MCP clients use OAuth Authorization Code + PKCE. Programmatic member runtimes use a member-scoped client_credentials credential; external-user backends use an organisation gateway key plus per-call end-user attestation.
  • The Platform API has its own OAuth credential and scopes. A Platform API token is not an MCP invocation credential.
  • Organisation, group, agent, and member checks are enforced before a tool call runs. Group entitlements are the tool gate; policies then decide permit, approval, or deny.

Credential isolation​

  • Members connect provider accounts in CortexHub Cloud. Org Agents use organisation-shared credentials where a toolkit requires them. External-user backends supply the provider credentials they own.
  • Credentials are injected only for the governed invocation. They are never returned to the model, exposed as a tool result, or written into chat transcripts.
  • Rotating or disconnecting a credential affects only the scope it belongs to. It does not change another member's connection or an organisation's entitlement.

Policy and data handling​

  • The organisation floor applies to every call. Groups and members can only tighten it.
  • Safety profiles classify tools as read, write, or destructive. Policies can permit, require approval, require step-up, redact stored records, or deny.
  • Redaction applies to stored audit and telemetry records. It does not silently change the live request or response sent to the provider.
  • A denied request is stopped before provider execution. An approval-gated request is parked as an MCP Task and resumes once after a decision.

Evidence and response​

Every governed attempt, including denied and parked calls, produces an audit event and an enforcement receipt. Receipts link the principal, policy decision, approval state, and tool outcome. Organisations can configure telemetry destinations for independent monitoring and retention.

Enterprise assurance​

Use these controls and audit records to evaluate CortexHub against your organisation's security requirements. Contract-specific commitments and security review materials are available from CortexHub during evaluation.

See also​