MCP: motorical_whoami works for every connection
- Fixed.
motorical_whoamiwas listed underread:analytics, but the API route behind it needed a different scope (config.read) thatread:analyticsdoes not carry. A connection holding onlyread:analyticssaw the tool and got403 missing_scope; a connection holding onlysend:transactionalormanage:webhooksnever saw it. - Now. Any OAuth connection can call it, whatever scopes it holds, and every hosted server except
signuplists it, so an agent can always ask what it holds. It stays visible after the sandbox phase. - Unchanged. Every other credential (an account-key token, a dashboard token) still needs
config.readto read it, because the owner email is returned in full. - Packages.
@motorical/mcp1.21.0 and@motorical/scope-catalog0.6.0 are on npm; the hosted servers already run the change.
Documentation changed