Product
Vatan MCP: your AI assistant needs no key
One address, one sign-in, and it works as you.
By Ehsan Gazar, 31 October 2026
You ask your coding assistant to check last week's spend. It cannot see your workspace. So you open the console, copy the numbers and paste them back into the chat.
Or you give the assistant a key. Now a chat window holds far more access than you meant to hand over.
You wanted it to do the job the way you would, and no more.
One address instead of a key
Vatan MCP is a single address: https://mcp.vatan.one/mcp. You add it to the assistant you already use, such as Claude Code, Codex, Cursor or Claude.ai.
claude mcp add --transport http vatan https://mcp.vatan.one/mcp
The assistant opens your browser. You sign in to Vatan, or create an account on the same page. You tick what the assistant may do and press Allow.
There is nothing to copy and paste.
The assistant keeps a short-lived pass and renews it on its own.
Most connections give an assistant one tool per action. A platform with hundreds of actions fills the assistant's memory with tool descriptions before it has done any work.
Vatan MCP gives it two. search finds the right operation in plain words and says what each one needs. execute runs a short script that calls those operations in one go.
Ask it to list your keys and show each one's spend this week. That becomes one small script, not twenty round trips. The script runs in a sealed sandbox, where it can reach Vatan and nothing else.
Your access, and only yours
The assistant never gets more than you have. Every call is checked against your permissions at that moment, then narrowed to what you ticked.
Read and write are on by default. Spending credit and deleting are off until you turn them on. Even then, each such call has to be confirmed in the script itself.
If someone removes your access tomorrow, the assistant loses it in the same moment.
Some actions always stay with a person in the console, whatever you tick. The assistant cannot change passwords or sessions, touch payment details or delete the account.
Every call it makes is written to your workspace's audit log, under the app you connected.
Switching it off
Each connected app is listed under MCP keys in the console. Disconnect one and it stops at once: its very next request is refused.
An assistant you can switch off in one click is one you can actually let work.