McpRequestPrincipal

McpRequestPrincipal = { kind: "workspace_owner"; } | { kind: "member"; member_id: string; }

Defined in: mcp.ts:111

Authenticated workspace identity attached to a user turn.

This carries identity only, never a cached role/capability set. Member authorization is re-resolved from the live member store for each privileged tool call so suspension and role changes take effect immediately.