Field McpAudience

Namespace

MailFathom.Common.ClientAssertions

Assembly

MailFathom.Common.dll

The audience an assertion presented to the MCP endpoint must name.

public const string McpAudience = "urn:mailfathom:mcp"

Returns

string

The audience an assertion presented to the MCP endpoint must name.

Remarks

A URN rather than the endpoint's address, because the address is a deployment's own and the two surfaces have to be told apart without one. What it buys is the separation that matters here: an assertion minted to read a mailbox is refused by the administrative endpoint and the other way round, whatever the operator registered the key on. What it deliberately does not buy is separation between two deployments that registered the same public key, which is a client the operator of either can then speak for; a client that must not be is given a key pair per deployment.