There’s no clean read-only or capability-scoped access.-> always found that to be a no brainer backend feature, somehow most platforms misses that
Most platforms were built assuming a human behind the UI. Once you introduce AI agents, the missing permission layers start to show.