# Rights and data

- **An agent has your token's rights.** `x` hands Claude Code the token of the profile,
  write access included. The agent is asked to treat the ticket as foreign text and to
  ask before changing it. That is a request, not a boundary. If you want a boundary, use
  a read-only token.
- **One server only.** The tool talks only to the server in your profile. An agent's
  session sees that server and none of your other MCP servers.
- **Your token stays in private files.** The config and the files under
  `~/.cache/lalabase` must be yours alone, or the tool refuses them. The cache keeps
  ticket text for up to 24 hours.
- **Text from the server is treated as foreign.** Titles, comments and names are cleaned
  before they reach your terminal, so they cannot send it control sequences.