PATs, org-level toggle, audit
Control and audit assistant access, from what a token grants to the organisation-level switch, the audit trail and rotation.
4 lessons. 1 quiz.
Read in order, or jump to what you need.
The PAT: what it grants
By the end of this lesson, you will be able to create and scope a PAT correctly, explain why the decision happens at call time, and choose the right naming and expiry for traceable rotation.
Org-level MCP toggle
By the end of this lesson, you will be able to use the org-level MCP toggle as a central kill switch, execute a deliberate MCP rollout pattern, and explain the four-layer compliance posture to a CISO.
Audit logging for MCP
By the end of this lesson, you will be able to read MCP audit logs to track usage, construct common audit queries, and wire anomaly alerts to your SIEM.
PAT rotation
By the end of this lesson, you will be able to execute a safe PAT rotation sequence, automate rotation via secret managers, and respond to compromise scenarios.
Module quiz.
Take it once the lessons are done.