Authentication
How IncidentFlow resolves users, workspaces, and MCP access.
IncidentFlow tools are authenticated before they can read workspace context or write workspace memory.
Workspace Resolution
Workspace tools do not accept arbitrary workspace access. The platform resolves the active workspace from the authenticated principal, then applies permission checks before it calls integration or memory services.
MCP Authentication
MCP clients should authenticate with IncidentFlow OAuth or an approved workspace token. The token provides the principal and workspace context needed by tools such as Kubernetes, Grafana, Slack, Argo CD, and workspace memory search.
Public Documentation Search
Public documentation search does not require workspace access. It searches only official documentation content and never reads customer incidents, private URLs, tokens, or workspace memory.