Skip to content
DE EN

Rights and data

  • An agent has your token's rights. x hands Claude Code the token of the profile, write access included. The agent is asked to treat the ticket as foreign text and to ask before changing it. That is a request, not a boundary. If you want a boundary, use a read-only token.
  • One server only. The tool talks only to the server in your profile. An agent's session sees that server and none of your other MCP servers.
  • Your token stays in private files. The config and the files under ~/.cache/lalabase must be yours alone, or the tool refuses them. The cache keeps ticket text for up to 24 hours.
  • Text from the server is treated as foreign. Titles, comments and names are cleaned before they reach your terminal, so they cannot send it control sequences.