When three different assistants are connected to the same account, one revoke-all switch is a blunt instrument. Listing tokens per client means you can cut off the one that misbehaved and leave the rest working. On the tools themselves: upload happens through generated URLs rather than by posting bytes through the server, which keeps large attachments out of the model's context entirely.
BugHerd's endpoint over their website feedback and bug-tracking product. Nineteen tools cover projects, tasks and the assets attached to them, and the documentation notes the set may grow.
- Projects: list, read details, create, update settings, manage tracked site URLs
- Tasks: list yours, list across projects, read one in full, create, update, comment
- Task metadata: assignees, tags
- Attachments and project assets, through generated secure upload URLs
OAuth 2.0 bearer — an unauthenticated call returns 401 with the discovery metadata. Each client gets its own token, and they are listable and revocable under Settings → MCP Access Tokens.
Paste a URL, then authorize — add the endpoint to your client, then approve the OAuth consent screen