serviceAccountsEnabled on the Approvisionnement client, and its service account
holds read_only — the least privilege its periodic run needs. The MCP server
maps that to a consumer group, so the catalog's write tool is invisible to this
identity rather than merely unused.
The classic-models-mandate client added earlier stays, unused. An autonomous run
acts for itself; a mandate belongs where a person's own authority is in play.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Stéphane Tailland
9f2bd159d8