---
roles:
  mcp:
    description: May drive this application's MCP clients, which reach every admitted provider with the credentials the deployment issued rather than the
      caller's own