Persona MCP Endpoints

Signed-in /mcp builds its tool list from the caller roles and enabled app features. Narrow persona paths stay least-privilege. Admin stays separate.

OL Edge exposes MCP on several paths. Anonymous agents use /mcp-public for public catalog reads. Signed-in staff use /mcp. Each tools/list on /mcp is built for that caller: the union of the persona bundles they hold, with disabled app features removed, and duplicate tool names kept once. A tools/call for a tool outside that list is rejected. Narrow persona paths stay fixed least-privilege servers and share the /mcp sign-in. /mcp-admin is not part of /mcp.