PD MCP Gateway

Phase 1 §0.5 connector-auth POC. Audit-only proxy in front of Supabase MCP. Single tool: list_tables.

MCP endpoint

Streamable HTTP at /api/mcp. Register this as a Custom Connector in Claude/Cowork (Settings → Connectors → Add custom connector → paste the deployed URL + /api/mcp).

Status

• POC scope only — no audit log, no token table, no migration.
• No inbound auth on the MCP endpoint (intentional for POC; tightens in §1+).
• Outbound auth: shared Supabase PAT from env vars.