Cursor
Cursor's agent, past the edge of the repo.
One MCP server, only the tools you allow, no key in the config.
Cursor’s agent only knows what is in the repo. The usual fix is several MCP servers, each with its own config and its own API key sitting in a file.
gbrain is one server. You choose which tools the agent sees, and the only credential in your settings is a revocable token.