NEO AppAcme Inc
Portal, CLI, and MCP share the same project state and approval policy.

Security and approvals

Keep credentials write-only, enforce least privilege, and pause at the exact approval boundary.

Governance

Security and approvals

Keep credentials write-only, enforce least privilege, and pause at the exact approval boundary.

1

Least privilege

Scope members, tokens, agents, and CI to only the projects and actions they require.

2

Protected changes

Production, paid capacity, public exposure, secrets, and destructive changes require review or confirmation.

3

Secret handling

Secrets never belong in URLs, prompts, logs, screenshots, command history, or share links.

4

Audit

Portal, CLI, API, and MCP changes must converge on the same Activity and approval history.