Isolate each user’s SaaS credential in a separate vault

Goal

Keep multi-tenant user tokens out of shared agent configuration and prompts.

Steps

1. Create one vault per internal user with client.beta.vaults.create(display_name=..., metadata=...). [operate]
2. Bind the user’s MCP credential with vaults.credentials.create(vault_id=..., auth={"type":"static_bearer", ...}); read the token only from a secret store. [operate]
3. Verify the identity and audit metadata after the run; archive the credential and vault when access is revoked. [operate]

How to verify

A test user sees only their mock resources, another user’s vault lacks the token, and revocation archives the credential.

Troubleshooting

If the MCP credential is not resolved, confirm it is attached to the session’s vault and the server URL matches; do not fall back to shared environment variables.