Immens MCP Fortress - Security¶
Access Points¶
Create access points with granular permissions:
- Read-only: read only (posts, media, comments)
- Full: read + write
- Custom: select individual allowed tools
IP Whitelist¶
Restrict access to specific IPs or subnets in CIDR notation:
Rate Limiting¶
Each access point has a configurable limit of requests per minute (default: 60).
Authentication¶
- Bearer Token: API key in
imf_+ 64 hex chars format in the Authorization header - URL Parameter: API key as URL parameter
?api_key=... - OAuth 2.1 PKCE: for third-party applications
Audit Log¶
All MCP operations are logged with: - Tool used - Call arguments - Origin IP - Status (success/error) - Timestamp