# Hosted MCP: L2 deployment boundary

Effective decision: 2026-09-08. MCP product design and code belong to the
[independent L1 Worker](https://github.com/pingcap-inc/nexuscrm-app-packs/blob/49e9998af867edfc3f5715eee2bfc8e8e0b8c2f7/docs/design/mcp-l1-worker.md).
L1 implementation and review: [#869](https://github.com/pingcap-inc/nexuscrm-app-packs/pull/869).
Core's shared contract reconciliation: [#4828](https://github.com/pingcap-inc/NexusCRM/pull/4828).

The Worker consumes published Runtime CRM APIs under the authenticated user's
current permissions. It has no Connected App, connector service, MCP-specific
scope/profile or embedded SFCRM AppService dependency. The MCP protocol and
product tool contract are not authored in this L2 repository.

L2 owns the selected Worker artifact, environment/workload registration, ingress
and target/public acceptance through existing deployment authority. This PR
changes only the incident documentation and a credential-free entry diagnostic;
it does not install a workload, select an unpublished image, change routing,
deploy, or declare user/client acceptance.

The [incident assessment](../operations/hosted-mcp-recovery.md) is the single
L2 evidence and rollout tracker. A successful entry probe establishes only the
configured native-bearer challenge and protected-resource document. It does not
prove login, permission equivalence, CRUD, metadata discovery, or a release.
The old OAuth authorization-server endpoint is not required by this Worker.

The previous S4 intent-tool, Connected App, hosted-read-only and embedded-process
proposal is superseded. Historical evidence remains available in
[the original PR revision](https://github.com/pingcap-inc/nexuscrm-pingcap-pack/blob/4e89f52213bcd0994ef147ddb839605b4c3d11b9/docs/design/web-mcp-deployment-and-agent-write-safety.md)
and in this file's Git history. Those proposals are not current implementation
or rollout gates. The user decision changes product ownership and permissions;
it does not claim physical removal of all legacy L0 MCP code or a live cutover.