目次
B2B clients shouldn't have to hunt through nested dashboard menus just to check milestone progress, verify site uptime, or open a change request. With Sajjad Studio's Client Portal MCP (`/api/client/mcp`), clients connect Claude or ChatGPT directly to their account via OAuth 2.1 + PKCE while strict tenant isolation and two-step write confirmation keep their account safe.
Strict Separation Between Staff and Client Doors
Client tokens only carry client:* scopes bound to a verified accountSlug. Every read and write re-verifies account status in real time, strips internal staff notes (isInternal: true), and labels untrusted text fields so prompt injection inside ticket history is never executed as instructions.
Two-Step Write Confirmation (`action_confirm`)
Write tools (ticket_create, ticket_reply, change_request_create) never mutate the database directly. They return a human-readable preview and a 600-second cryptographic confirmToken backed by an atomic PostgreSQL compare-and-set claim.
Want to give your clients an MCP-native portal experience? Get in touch with Sajjad Studio.