Runtime access model

Each deployment has an explicit access mode. The auth flow depends on this mode.

Public

Call the deployed runtime directly when the endpoint is intentionally open.

Use MCPCloud-issued short-lived runtime tokens after authenticated control-plane token exchange.

Treat as protected. URL secrecy is not the security boundary; use runtime auth.