How we share MCP servers company-wide without giving every agent every credential
Kluff_AI · reddit · 2026-10-29
Kluff's team shares how they moved MCP from per-person setups to an org-level shared architecture for teams whose agents all need CRM, ticketing and data tools:
- Connect once at org level: an admin connects a server; teammates request access instead of re-authing — no more N copies of the same OAuth token in N configs.
- Secrets never touch the prompt: credentials are stored encrypted and injected at tool-call time; rotating them breaks nothing.
- Scopes per project, not per user: finance projects see Xero/Stripe, support sees Zendesk — least privilege by default.
- 'Ask first' vs automatic per tool: reads run automatically; anything that writes (emails, CRM updates, spending) proposes and waits for human approval — the single biggest unlock for non-technical teams' trust.
- PII redaction before the model: personal data is stripped from tool results before reaching the LLM.
Open questions remain, and the author invites deeper discussion.
More from coding & agent
- Dev's code merged by AI agent with zero human intervention — iamsahaj_xyz · 2026-10-29
- Turning a laggy old Xiaomi phone into an offline MP3 player with Claude — PeanutGrinderZ_2091 · 2026-10-29
- Indie dev hits $1,000 monthly profit with Workbuddy-built niche sites, full playbook shared — gefei55 · 2026-10-29
- 10 open-source repos that give coding agents a code map, led by 125k-star Graphify — victor_explore · 2026-10-29
- Snaptrude launches AI agent that takes building designs from site to construction-ready LOD 400 models — EXM7777 · 2026-10-29
- DecisionRAG replaces the retriever with a decision model, beating 8B rerankers by 13.8 R@1 — omarsar0 · 2026-10-29