Use the documented endpoint
Copy the current MCP endpoint and authentication instructions from Developers. Keep the bearer token in the MCP client's secret or environment-variable facility.
Review every tool call
An MCP client can list or mutate data allowed by its Astral credential. Review requested actions, especially uploads and deletions, before authorizing an automated workflow.
Disconnect
Remove the server configuration from the MCP client and revoke the associated Astral key. Doing only one leaves the other side configured.