#Apps SDK/MCP question

1 messages · Page 1 of 1 (latest)

topaz mason
#

Apps SDK/MCP question: For an app where users can create content visible to others, what’s the recommended approach for: (1) abuse/rate limiting, (2) user identity/auth, and (3) tool annotations (e.g., openWorldHint) for user-generated content?

inland palm
#
  1. Abuse/rate limiting: enforce in your backend with per-user/IP limits and quotas
  2. User identity/auth: use OAuth or login and map requests to an internal user ID
  3. Tool annotations: use them as hints for behavior, but enforce access, permissions, and validation server-side