Skip to main content

​
Tenant isolation

The authenticated credential resolves to exactly one dealership. Database functions require that dealership ID internally, and every query filters on it. The client cannot choose or override tenant context.

​
Least privilege

Tools are registered only when their required permission is present. Full lead contact data requires the separate leads:pii permission in addition to leads:read. Connect an app, or create a key, per client.

​
Sign-in protection

  • OAuth 2.1 authorization code with PKCE S256; the authorization server is AutoFire’s hosted Supabase Auth.
  • AutoFire verifies every access token with the authorization server and then requires an active, unrevoked connection for that sign-in before any tool is exposed.
  • Only accepted members of the dealership’s team can approve a connection, and a connection stops working when its creator leaves the team; the consent screen names the app and where the browser will return.
  • Disconnecting in the dashboard cuts access immediately and, where possible, ends the app’s authorization so a reconnect shows consent again.

​
Credential protection

  • Keys contain 256 bits of generated randomness.
  • Only an HMAC verifier and identifying prefix are stored after creation.
  • Keys expire in 30, 60, or 90 days and can be revoked immediately.
  • A dealership can have no more than five active keys.

​
Request controls

AutoFire validates the host and browser origin, caps request bodies at 128 KiB, disables response caching, validates every tool argument and output, and rate-limits by source, credential, dealership, and tool. Limits vary by sensitivity; full lead lookup is more restrictive than vehicle lookup.

​
Monthly allowance

Each dealership has a monthly tool-call allowance shared by all of its keys and connected apps. It counts calls per UTC calendar month and resets on the first of the month. When the allowance is used up, tools return an error naming the limit and the reset date, and the dashboard shows usage under MCP & API. Upgrade the plan under Manage subscription for a higher limit.

​
Audit metadata

Successful and denied tool calls record limited operational metadata: credential or connection ID, dealership ID, tool, outcome, timing, result count, and a one-way hash of the source network address. Tokens, tool arguments, and returned customer content are excluded from this ledger. The normal retention target is 90 days.

​
If a credential is exposed

  1. Revoke the key, or disconnect the app, from Dashboard → MCP & API.
  2. Remove it from the affected client and secret stores.
  3. Reconnect, or create a replacement key, with the minimum permissions.
  4. Contact AutoFire support if you need help reviewing activity.
Revocation prevents future AutoFire access; it cannot erase data already sent to a connected provider.