- Published on
Article · Through the layers
The model should not choose whose credentials it uses
Resolve tool credentials from trusted server context. A model-selected account must be checked against the acting user's current permissions before any secret is used.